cbcvebase.
CVE-2023-53215
published 2025-09-15

CVE-2023-53215: In the Linux kernel, the following vulnerability has been resolved: sched/fair: Don't balance task to its current running CPU We've run into the case that the…

PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.15%
5.2th percentile
In the Linux kernel, the following vulnerability has been resolved: sched/fair: Don't balance task to its current running CPU We've run into the case that the balancer tries to balance a migration disabled task and trigger the warning in set_task_cpu() like below: ------------[ cut here ]------------ WARNING: CPU: 7 PID: 0 at kernel/sched/core.c:3115 set_task_cpu+0x188/0x240 Modules linked in: hclgevf xt_CHECKSUM ipt_REJECT nf_reject_ipv4 CPU: 7 PID: 0 Comm: swapper/7 Kdump: loaded Tainted: G O 6.1.0-rc4+ #1 Hardware name: Huawei TaiShan 2280 V2/BC82AMDC, BIOS 2280-V2 CS V5.B221.01 12/09/2021 pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : set_task_cpu+0x188/0x240 lr : load_balance+0x5d0/0xc60 sp : ffff80000803bc70 x29: ffff80000803bc70 x28: ffff004089e190e8 x27: ffff004089e19040 x26: ffff007effcabc38 x25: 0000000000000000 x24: 0000000000000001 x23: ffff80000803be84 x22: 000000000000000c x21: ffffb093e79e2a78 x20: 000000000000000c x19: ffff004089e19040 x18: 0000000000000000 x17: 0000000000001fad x16: 0000000000000030 x15: 0000000000000000 x14: 0000000000000003 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000000001 x10: 0000000000000400 x9 : ffffb093e4cee530 x8 : 00000000fffffffe x7 : 0000000000ce168a x6 : 000000000000013e x5 : 00000000ffffffe1 x4 : 0000000000000001 x3 : 0000000000000b2a x2 : 0000000000000b2a x1 : ffffb093e6d6c510 x0 : 0000000000000001 Call trace: set_task_cpu+0x188/0x240 load_balance+0x5d0/0xc60 rebalance_domains+0x26c/0x380 _nohz_idle_balance.isra.0+0x1e0/0x370 run_rebalance_domains+0x6c/0x80 __do_softirq+0x128/0x3d8 ____do_softirq+0x18/0x24 call_on_irq_stack+0x2c/0x38 do_softirq_own_stack+0x24/0x3c __irq_exit_rcu+0xcc/0xf4 irq_exit_rcu+0x18/0x24 el1_interrupt+0x4c/0xe4 el1h_64_irq_handler+0x18/0x2c el1h_64_irq+0x74/0x78 arch_cpu_idle+0x18/0x4c default_idle_call+0x58/0x194 do_idle+0x244/0x2b0 cpu_startup_entry+0x30/0x3c secondary_start_kernel+0x14c/0x190 __secondary_switched+0xb0/0xb4 ---[ end trace 00000000000000

Affected

21 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.52-1 (bookworm)linux 6.1.52-1 (bookworm)
linuxlinux
linuxlinux>= 88b8dac0a14c511ff41486b83a8c3d688936eec0 < 32d937f94b7805d4c9028b8727a7d6241547da5432d937f94b7805d4c9028b8727a7d6241547da54
linuxlinux>= 88b8dac0a14c511ff41486b83a8c3d688936eec0 < a5286f4655ce2fa28f477c0b957ea7f323fe2faba5286f4655ce2fa28f477c0b957ea7f323fe2fab
linuxlinux>= 88b8dac0a14c511ff41486b83a8c3d688936eec0 < cec1857b1ea5cc3ea2b600564f1c95d1a6f27ad1cec1857b1ea5cc3ea2b600564f1c95d1a6f27ad1
linuxlinux>= 88b8dac0a14c511ff41486b83a8c3d688936eec0 < 6b0c79aa33075b34c3cdcea4132c0afb3fc42d686b0c79aa33075b34c3cdcea4132c0afb3fc42d68
linuxlinux>= 88b8dac0a14c511ff41486b83a8c3d688936eec0 < 3cb43222bab8ab328fc91ed30899b3df2efbccfd3cb43222bab8ab328fc91ed30899b3df2efbccfd
linuxlinux>= 88b8dac0a14c511ff41486b83a8c3d688936eec0 < 78a5f711efceb37e32c48cd6b40addb671fea9cc78a5f711efceb37e32c48cd6b40addb671fea9cc
linuxlinux>= 88b8dac0a14c511ff41486b83a8c3d688936eec0 < 34eb902050d473bb2befa15714fb1d30a0991c1534eb902050d473bb2befa15714fb1d30a0991c15
linuxlinux>= 88b8dac0a14c511ff41486b83a8c3d688936eec0 < 0dd37d6dd33a9c23351e6115ae8cdac7863bc7de0dd37d6dd33a9c23351e6115ae8cdac7863bc7de
linuxlinux_kernel< 4.14.3224.14.322
linuxlinux_kernel>= 0 < 5.10.191-15.10.191-1
linuxlinux_kernel>= 0 < 6.1.52-16.1.52-1
linuxlinux_kernel>= 0 < 6.4.11-16.4.11-1
linuxlinux_kernel>= 0 < 6.4.11-16.4.11-1
linuxlinux_kernel>= 4.15 < 4.19.2914.19.291
linuxlinux_kernel>= 4.20 < 5.4.2515.4.251
linuxlinux_kernel>= 5.11 < 5.15.1505.15.150
linuxlinux_kernel>= 5.16 < 6.1.426.1.42
linuxlinux_kernel>= 5.5 < 5.10.1885.10.188
linuxlinux_kernel>= 6.2 < 6.4.76.4.7

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.