PT-2025-13328 · Linux+3 · Linux Kernel+3
Published
2023-01-13
·
Updated
2025-05-28
·
CVE-2023-52982
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.1.0-rc6+
Description
A synchronization issue exists in the Linux kernel's fscache module. The freeing of a relinquished volume wakes up pending volume acquisition using
wake up bit(), but this is mismatched with wait var event() used in fscache wait on volume collision(), causing the waiter in the wait-queue to never wake up. This can lead to a hang when the wake-up of pending acquisition is delayed, resulting in a timeout and subsequent hangs in wait var event(). The issue is resolved by using wait on bit() instead of wait var event() to wait for the freeing of relinquished volume.Recommendations
For Linux kernel versions prior to 6.1.0-rc6+, update to a version that includes the fix for the fscache synchronization issue.
As a temporary workaround, consider applying the patch that replaces
wait var event() with wait on bit() in fscache wait on volume collision() to prevent the hang.Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Os
Suse