CVE-2023-53151 — Improper Locking in Linux

CWE-667 — Improper LockingCWE-770 — Allocation of Resources Without Limits or Throttling5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 98.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedSep 15

Description

In the Linux kernel, the following vulnerability has been resolved: md/raid10: prevent soft lockup while flush writes Currently, there is no limit for raid1/raid10 plugged bio. While flushing writes, raid1 has cond_resched() while raid10 doesn't, and too many writes can cause soft lockup. Follow up soft lockup can be triggered easily with writeback test for raid10 with ramdisks: watchdog: BUG: soft lockup - CPU#10 stuck for 27s! [md0_raid10:1293] Call Trace: call_rcu+0x16/0x20 put_object+0x…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶NVDlinux/linux_kernel4.15 — 4.19.291+6
▶Debianlinux/linux_kernel< 5.10.191-1+3
▶CVEListV5linux/linux6cce3b23f6f8e974c00af7a9b88f1d413ba368a8 — f45b2fa7678ab385299de345f7e85d05caea386b+8
▶debiandebian/linux< linux 6.1.85-1 (bookworm)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
OSV
CVE-2023-53151: In the Linux kernel, the following vulnerability has been resolved: md/raid10: prevent soft lockup while flush writes Currently, there is no limit for↗2025-09-15
▶
GHSA
GHSA-c65j-9jmw-78h6: In the Linux kernel, the following vulnerability has been resolved: md/raid10: prevent soft lockup while flush writes Currently, there is no limit f↗2025-09-15
▶

📋Vendor Advisories

2
Red Hat
kernel: Linux kernel: md/raid10 soft lockup due to unlimited plugged bio↗2025-09-15
▶
Debian
CVE-2023-53151: linux - In the Linux kernel, the following vulnerability has been resolved: md/raid10: ...↗2023
▶
CVE-2023-53151 — Improper Locking in Linux | cvebase