PT-2025-43113 · Linux+1 · Linux Kernel+1
Published
2023-08-14
·
Updated
2026-03-14
·
CVE-2023-53712
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains an issue where synchronous calls during a panic triggered by a high-resolution timer (hrtimer) interrupt can lead to system instability. Specifically, when a panic occurs, all online CPUs are notified and set offline. However, a call to
smp call function many cond should not be made synchronously with disabled interrupts, as highlighted by a previous commit. This issue arises from the synchronous call within the machine crash nonpanic core() function. The fix involves making the smp call asynchronous. The stack trace indicates involvement of functions such as show stack, dump stack lvl, warn, smp call function many cond, smp call function, crash smp send stop.part.0, machine crash shutdown, crash kexec, panic, softdog fire, hrtimer run queues, and hrtimer interrupt.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Resource Release
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linux Kernel