PT-2025-13308 · Linux+3 · Linux Kernel+3

Published 2024-11-12 · Updated 2025-09-29 · CVE-2023-52932

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A softlockup issue in the Linux kernel has been identified, specifically in the get swap pages() function under memory pressure. This issue can occur when the system is under heavy load, with 64 CPU cores, 64GB memory, and 28 zram devices, each with a disk size of 50MB. The stress-ng tool can be used to increase memory pressure, causing the system to run out of memory frequently. The plist for each entry safe() loops in get swap pages() can iterate tens of thousands of times to find available space, leading to a softlockup. To address this, cond resched() has been added to get swap pages() to avoid softlockup when failed to find available space.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

BDU:2025-06290

CVE-2023-52932

RHSA-2024:9315

RHSA-2024_9315

Affected Products

Astra Linux

Linux Kernel

Red Hat

Red Os

References · 25

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52932.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2023-52932 · Vendor Advisory
• https://git.kernel.org/stable/c/5dbe1ebd56470d03b78fc31491a9e4d433106ef2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-52932 · Security Note
• https://git.kernel.org/stable/c/30187be29052bba9203b0ae2bdd815e0bc2faaab · Patch
• https://git.kernel.org/stable/c/49178d4d61e78aed8c837dfeea8a450700f196e2 · Patch
• https://cve.org/CVERecord?id=CVE-2023-52932 · Security Note
• https://git.kernel.org/stable/c/7717fc1a12f88701573f9ed897cc4f6699c661e3 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2023-52932 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52932 · Vendor Advisory
• https://git.kernel.org/stable/c/d49c85a1913385eed46dd16a25ad0928253767f0 · Patch
• https://git.kernel.org/stable/c/387217b97e99699c34e6d95ce2b91b327fcd853e · Patch
• https://git.kernel.org/stable/c/29f0349c5c76b627fe06b87d4b13fa03a6ce8e64 · Patch
• https://osv.dev/vulnerability/CVE-2023-52932 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52932 · Vendor Advisory