PT-2025-43131 · Linux+1 · Linux Kernel+1
Published
2023-06-05
·
Updated
2025-12-04
·
CVE-2023-53730
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.10.0-02758-g8e5f91fd772f #26
Description
The Linux kernel contained a flaw within the block I/O cost (blk-iocost) subsystem. Specifically, the
adjust inuse and calc cost() function utilized spin lock irq() and enabled interrupts upon unlocking, potentially leading to a DEADLOCK scenario if other locks were held with interrupts disabled before invoking this function. The issue stemmed from inconsistent interrupt handling during lock acquisition and release. The fix involved replacing spin lock irq() with spin lock irqsave(), ensuring consistent interrupt state management during lock operations. The vulnerability could result in system instability or hangs. The affected function is adjust inuse and calc cost().Recommendations
Versions prior to 5.10.0-02758-g8e5f91fd772f #26 should be updated to a newer, fixed version of the Linux kernel.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Suse