PT-2025-43129 · Linux+1 · Linux Kernel+1
Published
2023-06-18
·
Updated
2025-11-28
·
CVE-2023-53728
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains an issue within the posix-timers component. The
posix timer add() function attempts to allocate a posix timer ID by starting from a cached ID. This allocation process involves a loop that searches the ID space for a free slot. The loop's termination condition relies on comparing the current ID with the starting ID, but the starting ID is read locklessly, creating a race condition. This race condition can lead to a scenario where a negative starting value is observed, preventing the loop from terminating as intended. While the ID space is large, making an endless loop unlikely, the issue was identified by KCSAN. The problem arises from performing ID operations outside of the hash lock.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Suse