PT-2025-54097 · Linux · Linux Kernel

Published 2025-12-30 · Updated 2026-01-01 · CVE-2023-54268

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the debugobjects subsystem related to memory allocation within the fill pool() function. Specifically, the allocation from debugobjects was using GFP ATOMIC, which attempts to wake up the kswapd process while holding arbitrary locks. This can lead to a lock dependency warning as acquiring kswapd wait::lock is not safe when called from fill pool() with arbitrary locks held. The issue is addressed by using GFP HIGH instead and removing GFP NORETRY.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-54268

RHSA-2024:9315

Affected Products

Linux Kernel

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54268.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54268 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54268 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-54268 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-54268 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-54268 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54268 · Security Note
• https://ubuntu.com/security/CVE-2023-54268 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54268 · Vendor Advisory
• https://git.kernel.org/stable/c/4c088d30a72d9b8f9c6ae9362222942e4075cb00 · Note
• https://lore.kernel.org/linux-cve-announce/2025123000-CVE-2023-54268-3ba2@gregkh/T · Note
• https://git.kernel.org/stable/c/fd673079749bac97bb30f1461df079e6c8e86511 · Note
• https://git.kernel.org/stable/c/aee97eec77029270866c704f66cdf2881cbd2fe1 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://docs.bell-sw.com/security/cves/CVE-2023-54268 · Note