CVE-2023-53815
published 2025-12-09CVE-2023-53815: In the Linux kernel, the following vulnerability has been resolved: posix-timers: Prevent RT livelock in itimer_delete() itimer_delete() has a retry loop when…
PriorityP420medium4.7
EPSS
0.19%
8.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
posix-timers: Prevent RT livelock in itimer_delete()
itimer_delete() has a retry loop when the timer is concurrently expired. On
non-RT kernels this just spin-waits until the timer callback has completed,
except for posix CPU timers which have HAVE_POSIX_CPU_TIMERS_TASK_WORK
enabled.
In that case and on RT kernels the existing task could live lock when
preempting the task which does the timer delivery.
Replace spin_unlock() with an invocation of timer_wait_running() to handle
it the same way as the other retry loops in the posix timer code.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.52-1 (bookworm) | linux 6.1.52-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= ec8f954a40da8cd3d159713b608e901f0cd909a9 < f1be1ed32daa053484222f7f9beb2b16c624dffd | f1be1ed32daa053484222f7f9beb2b16c624dffd |
| linux | linux | >= ec8f954a40da8cd3d159713b608e901f0cd909a9 < 0670c4c567b27bd8f999a943028f4fe60d1a1106 | 0670c4c567b27bd8f999a943028f4fe60d1a1106 |
| linux | linux | >= ec8f954a40da8cd3d159713b608e901f0cd909a9 < e7aff15ba29ba4b3052786b1636fa5c4aa39e179 | e7aff15ba29ba4b3052786b1636fa5c4aa39e179 |
| linux | linux | >= ec8f954a40da8cd3d159713b608e901f0cd909a9 < f9bd298e3e4d3fd6e19f017789a42d0f332cd555 | f9bd298e3e4d3fd6e19f017789a42d0f332cd555 |
| linux | linux | >= ec8f954a40da8cd3d159713b608e901f0cd909a9 < c1968bb8a28625cc95d2ad3ca872ab98c9c36d59 | c1968bb8a28625cc95d2ad3ca872ab98c9c36d59 |
| linux | linux | >= ec8f954a40da8cd3d159713b608e901f0cd909a9 < 9d9e522010eb5685d8b53e8a24320653d9d4cbbf | 9d9e522010eb5685d8b53e8a24320653d9d4cbbf |
| linux | linux_kernel | >= 0 < 5.10.191-1 | 5.10.191-1 |
| linux | linux_kernel | >= 0 < 6.1.52-1 | 6.1.52-1 |
| linux | linux_kernel | >= 0 < 6.4.4-1 | 6.4.4-1 |
| linux | linux_kernel | >= 0 < 6.4.4-1 | 6.4.4-1 |
| linux | linux_kernel | >= 5.11.0 < 5.15.121 | 5.15.121 |
| linux | linux_kernel | >= 5.16.0 < 6.1.39 | 6.1.39 |
| linux | linux_kernel | >= 5.4.0 < 5.10.188 | 5.10.188 |
| linux | linux_kernel | >= 6.2.0 < 6.3.13 | 6.3.13 |
| linux | linux_kernel | >= 6.4.0 < 6.4.4 | 6.4.4 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2023-53815: In the Linux kernel, the following vulnerability has been resolved: posix-timers: Prevent RT livelock in itimer_delete() itimer_delete() has a retry l
osv·2025-12-09
CVE-2023-53815 CVE-2023-53815: In the Linux kernel, the following vulnerability has been resolved: posix-timers: Prevent RT livelock in itimer_delete() itimer_delete() has a retry l
In the Linux kernel, the following vulnerability has been resolved: posix-timers: Prevent RT livelock in itimer_delete() itimer_delete() has a retry loop when the timer is concurrently expired. On non-RT kernels this just spin-waits until the timer callback has completed, except for posix CPU timers which have HAVE_POSIX_CPU_TIMERS_TASK_WORK enabled. In that case and on RT kernels the existing task could live lock when preempting the task which does the timer delivery. Replace spin_unlock() with an invocation of timer_wait_running() to handle it the same way as the other retry loops in the posix timer code.
GHSA
GHSA-qppf-xpg3-fxjq: In the Linux kernel, the following vulnerability has been resolved:
posix-timers: Prevent RT livelock in itimer_delete()
itimer_delete() has a retry
ghsa_unreviewed·2025-12-09
CVE-2023-53815 GHSA-qppf-xpg3-fxjq: In the Linux kernel, the following vulnerability has been resolved:
posix-timers: Prevent RT livelock in itimer_delete()
itimer_delete() has a retry
In the Linux kernel, the following vulnerability has been resolved:
posix-timers: Prevent RT livelock in itimer_delete()
itimer_delete() has a retry loop when the timer is concurrently expired. On
non-RT kernels this just spin-waits until the timer callback has completed,
except for posix CPU timers which have HAVE_POSIX_CPU_TIMERS_TASK_WORK
enabled.
In that case and on RT kernels the existing task could live lock when
preempting the task which does the timer delivery.
Replace spin_unlock() with an invocation of timer_wait_running() to handle
it the same way as the other retry loops in the posix timer code.
OSV
posix-timers: Prevent RT livelock in itimer_delete()
osv·2025-12-09
CVE-2023-53815 posix-timers: Prevent RT livelock in itimer_delete()
posix-timers: Prevent RT livelock in itimer_delete()
In the Linux kernel, the following vulnerability has been resolved:
posix-timers: Prevent RT livelock in itimer_delete()
itimer_delete() has a retry loop when the timer is concurrently expired. On
non-RT kernels this just spin-waits until the timer callback has completed,
except for posix CPU timers which have HAVE_POSIX_CPU_TIMERS_TASK_WORK
enabled.
In that case and on RT kernels the existing task could live lock when
preempting the task which does the timer delivery.
Replace spin_unlock() with an invocation of timer_wait_running() to handle
it the same way as the other retry loops in the posix timer code.
Red Hat
kernel: posix-timers: Prevent RT livelock in itimer_delete()
vendor_redhat·2025-12-09·CVSS 4.7
CVE-2023-53815 [MEDIUM] CWE-835 kernel: posix-timers: Prevent RT livelock in itimer_delete()
kernel: posix-timers: Prevent RT livelock in itimer_delete()
In the Linux kernel, the following vulnerability has been resolved:
posix-timers: Prevent RT livelock in itimer_delete()
itimer_delete() has a retry loop when the timer is concurrently expired. On
non-RT kernels this just spin-waits until the timer callback has completed,
except for posix CPU timers which have HAVE_POSIX_CPU_TIMERS_TASK_WORK
enabled.
In that case and on RT kernels the existing task could live lock when
preempting the task which does the timer delivery.
Replace spin_unlock() with an invocation of timer_wait_running() to handle
it the same way as the other retry loops in the posix timer code.
A flaw was found in the Linux kernel’s POSIX timer implementation where the itimer_delete() function enters a retry loop i
Debian
CVE-2023-53815: linux - In the Linux kernel, the following vulnerability has been resolved: posix-timer...
vendor_debian·2023
CVE-2023-53815 CVE-2023-53815: linux - In the Linux kernel, the following vulnerability has been resolved: posix-timer...
In the Linux kernel, the following vulnerability has been resolved: posix-timers: Prevent RT livelock in itimer_delete() itimer_delete() has a retry loop when the timer is concurrently expired. On non-RT kernels this just spin-waits until the timer callback has completed, except for posix CPU timers which have HAVE_POSIX_CPU_TIMERS_TASK_WORK enabled. In that case and on RT kernels the existing task could live lock when preempting the task which does the timer delivery. Replace spin_unlock() with an invocation of timer_wait_running() to handle it the same way as the other retry loops in the posix timer code.
Scope: local
bookworm: resolved (fixed in 6.1.52-1)
bullseye: resolved (fixed in 5.10.191-1)
forky: resolved (fixed in 6.4.4-1)
sid: resolved (fixed in 6.4.4-1)
trixie: resolved (fixed
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/0670c4c567b27bd8f999a943028f4fe60d1a1106https://git.kernel.org/stable/c/9d9e522010eb5685d8b53e8a24320653d9d4cbbfhttps://git.kernel.org/stable/c/c1968bb8a28625cc95d2ad3ca872ab98c9c36d59https://git.kernel.org/stable/c/e7aff15ba29ba4b3052786b1636fa5c4aa39e179https://git.kernel.org/stable/c/f1be1ed32daa053484222f7f9beb2b16c624dffdhttps://git.kernel.org/stable/c/f9bd298e3e4d3fd6e19f017789a42d0f332cd555
2025-12-09
Published