PT-2025-53237 · Linux+2 · Linux Kernel+2

Published 2025-12-24 · Updated 2026-01-23 · CVE-2023-54160

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-rc3-rt5

Description The Linux kernel contains a flaw related to the arm sdei firmware component. A bug exists where a sleeping function can be called from an invalid context, specifically triggered when running a preempt-rt kernel (v6.2-rc3-rt1) on an Ampere Altra system. This issue occurs because sdei cpuhp up() is called during the STARTING hotplug section, which runs with interrupts disabled. The fix involves moving 'WARN ON ONCE(preemptible())' statements to prevent triggering them during SDEI cpuhp callbacks and adding a check for the SDEI 1 0 FN SDEI PRIVATE RESET call, which operates on the calling CPU. The original SDEI cpuhp slot was superseded by pNMI, making the early slot irrelevant. Some SDEI calls take actions on the calling CPU and require preemption to be disabled.

Recommendations Update to a version later than 5.19.0-rc3-rt5.

Exploit

Related Identifiers

CVE-2023-54160

OESA-2026-1231

RHSA-2024:2394

Affected Products

Ampere Altra

Linux Kernel

Arm Sdei Firmware

References · 37

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54160.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50755 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53832 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53817 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-54123 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50422 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-54160 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1231 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54160 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50749 · Security Note
• https://osv.dev/vulnerability/CVE-2023-54160 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50671 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54160 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-40322 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-54091 · Security Note