CVE-2023-53655: In the Linux kernel, the following vulnerability has been resolved: rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed Registering a…

PriorityP423medium5.5CVSS 3.1

AVLACLPRLUINSUCNINAH

EPSS

0.16%

5.9th percentile

In the Linux kernel, the following vulnerability has been resolved: rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed Registering a kprobe on __rcu_irq_enter_check_tick() can cause kernel stack overflow as shown below. This issue can be reproduced by enabling CONFIG_NO_HZ_FULL and booting the kernel with argument "nohz_full=", and then giving the following commands at the shell prompt: # cd /sys/kernel/tracing/ # echo 'p:mp1 __rcu_irq_enter_check_tick' >> kprobe_events # echo 1 > events/kprobes/enable This commit therefore adds __rcu_irq_enter_check_tick() to the kprobes blacklist using NOKPROBE_SYMBOL(). Insufficient stack space to handle exception! ESR: 0x00000000f2000004 -- BRK (AArch64) FAR: 0x0000ffffccf3e510 Task stack: [0xffff80000ad30000..0xffff80000ad38000] IRQ stack: [0xffff800008050000..0xffff800008058000] Overflow stack: [0xffff089c36f9f310..0xffff089c36fa0310] CPU: 5 PID: 190 Comm: bash Not tainted 6.2.0-rc2-00320-g1f5abbd77e2c #19 Hardware name: linux,dummy-virt (DT) pstate: 400003c5 (nZcv DAIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __rcu_irq_enter_check_tick+0x0/0x1b8 lr : ct_nmi_enter+0x11c/0x138 sp : ffff80000ad30080 x29: ffff80000ad30080 x28: ffff089c82e20000 x27: 0000000000000000 x26: 0000000000000000 x25: ffff089c02a8d100 x24: 0000000000000000 x23: 00000000400003c5 x22: 0000ffffccf3e510 x21: ffff089c36fae148 x20: ffff80000ad30120 x19: ffffa8da8fcce148 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: ffffa8da8e44ea6c x14: ffffa8da8e44e968 x13: ffffa8da8e03136c x12: 1fffe113804d6809 x11: ffff6113804d6809 x10: 0000000000000a60 x9 : dfff800000000000 x8 : ffff089c026b404f x7 : 00009eec7fb297f7 x6 : 0000000000000001 x5 : ffff80000ad30120 x4 : dfff800000000000 x3 : ffffa8da8e3016f4 x2 : 0000000000000003 x1 : 0000000000000000 x0 : 0000000000000000 Kernel panic - not syncing: kernel stack overflow CPU: 5 PID: 190 Comm: bash Not tainted 6.2.0-rc2-00320-g1f5abbd77e2c #19 Hardware name: linux,dummy-vir

Affected

17 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.1.37-1 (bookworm)	linux 6.1.37-1 (bookworm)
linux	linux	—	—
linux	linux	>= aaf2bc50df1f4bfc6857fc601fc7b21d5a18c6a1 < eb18bc5a8678f431c500e6da1b8b5f34478d5bc1	eb18bc5a8678f431c500e6da1b8b5f34478d5bc1
linux	linux	>= aaf2bc50df1f4bfc6857fc601fc7b21d5a18c6a1 < 4c3d1a6720aefb02403ddfebe85db521d3af2c3b	4c3d1a6720aefb02403ddfebe85db521d3af2c3b
linux	linux	>= aaf2bc50df1f4bfc6857fc601fc7b21d5a18c6a1 < c8a3341b339285495cf7c8d061d659465f2311e0	c8a3341b339285495cf7c8d061d659465f2311e0
linux	linux	>= aaf2bc50df1f4bfc6857fc601fc7b21d5a18c6a1 < 93b6295f677d96b73cfcb703532f6c7369a60d96	93b6295f677d96b73cfcb703532f6c7369a60d96
linux	linux	>= aaf2bc50df1f4bfc6857fc601fc7b21d5a18c6a1 < 7b5a97333e920b69356e097f185bdc51d61e66ee	7b5a97333e920b69356e097f185bdc51d61e66ee
linux	linux	>= aaf2bc50df1f4bfc6857fc601fc7b21d5a18c6a1 < 7a29fb4a4771124bc61de397dbfc1554dbbcc19c	7a29fb4a4771124bc61de397dbfc1554dbbcc19c
linux	linux_kernel	>= 0 < 5.10.191-1	5.10.191-1
linux	linux_kernel	>= 0 < 6.1.37-1	6.1.37-1
linux	linux_kernel	>= 0 < 6.3.7-1	6.3.7-1
linux	linux_kernel	>= 0 < 6.3.7-1	6.3.7-1
linux	linux_kernel	>= 5.11 < 5.15.111	5.15.111
linux	linux_kernel	>= 5.16 < 6.1.28	6.1.28
linux	linux_kernel	>= 5.8 < 5.10.180	5.10.180
linux	linux_kernel	>= 6.2 < 6.2.15	6.2.15
linux	linux_kernel	>= 6.3 < 6.3.2	6.3.2

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

osv5.5MEDIUM

vendor_debian5.5MEDIUM

vendor_redhat5.5MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.