CVE-2023-53860 — Use of a Non-reentrant Function in a Concurrent Context in Linux
Severity
4.7MEDIUM
No vectorEPSS
0.0%
top 90.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 9
Description
In the Linux kernel, the following vulnerability has been resolved:
dm: don't attempt to queue IO under RCU protection
dm looks up the table for IO based on the request type, with an
assumption that if the request is marked REQ_NOWAIT, it's fine to
attempt to submit that IO while under RCU read lock protection. This
is not OK, as REQ_NOWAIT just means that we should not be sleeping
waiting on other IO, it does not mean that we can't potentially
schedule.
A simple test case demonstrates this q…
Affected Packages4 packages
▶CVEListV5linux/linux563a225c9fd207326c2a2af9d59b4097cb31ce70 — d7b2abd87d1fcdb47811f90090a363e7ca15cb14+3
🔴Vulnerability Details
3OSV▶
CVE-2023-53860: In the Linux kernel, the following vulnerability has been resolved: dm: don't attempt to queue IO under RCU protection dm looks up the table for IO ba↗2025-12-09
GHSA▶
GHSA-g5v9-7ppc-vg8p: In the Linux kernel, the following vulnerability has been resolved:
dm: don't attempt to queue IO under RCU protection
dm looks up the table for IO↗2025-12-09