Linux · Linux Kernel · CVE-2023-52498
**Name of the Vulnerable Software and Affected Versions**
Linux kernel (affected versions not specified)
**Description**
The issue is related to possible deadlocks in the core system-wide PM code of the Linux kernel. In low-memory situations, the system-wide resume core code deadlocks because `async schedule dev()` executes its argument function synchronously if it cannot allocate memory, and this function attempts to acquire a mutex that is already held. Executing the argument function synchronously from within `dpm async fn()` may also be problematic for ordering reasons. The problem is addressed by changing the code to use `async schedule dev nocall()` for scheduling the asynchronous execution of device suspend and resume functions and to directly run them synchronously if `async schedule dev nocall()` returns false.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.