CVE-2023-54306

A denial-of-service flaw was found in the Linux kernel's TLS implementation. An adversarial network receiver can keep the TCP receive window (RWIN) at zero for extended periods, causing a thread holding the tx_lock to sleep indefinitely. Other tasks waiting for this lock become hung, leading to system unresponsiveness.

While the trigger requires network interaction with a malicious peer, the impact is local task hangs. The fix changes to interruptible sleeps so tasks can be interrupted and the lock contention resolved. This is a network-triggered local DoS rather than a remote code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.