PT-2025-54162 · Linux · Linux Kernel
Published
2023-07-14
·
Updated
2026-03-24
·
CVE-2023-54316
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw related to the initialization of
wait queue head t. Specifically, the refscale test can occasionally cause a kernel crash due to an attempt to access an uninitialized wait queue head. This occurs when a new kthread uses the wait queue head before it is properly initialized, leading to a supervisor read access error. The issue stems from a potential race condition where the init waitqueue head() function is called after the creation of a kthread that utilizes the wait queue, but before the initialization is complete. This can result in accessing a memory location with a null pointer, triggering the crash. The vulnerable code is located within the add wait queue() function, specifically when checking the WQ FLAG PRIORITY flag.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel