VDB

DEBIAN-CVE-2023-54268

DEBIAN-CVE-2023-54268 PUBLISHED

In the Linux kernel, the following vulnerability has been resolved: debugobjects: Don't wake up kswapd from fill_pool() syzbot is reporting a lockdep warning in fill_pool() because the allocation from debugobjects is using GFP_ATOMIC, which is (__GFP_HIGH | __GFP_KSWAPD_RECLAIM) and therefore tries to wake up kswapd, which acquires kswapd_wait::lock. Since fill_pool() might be called with arbitrary locks held, fill_pool() should not assume that acquiring kswapd_wait::lock is safe. Use __GFP_HIGH instead and remove __GFP_NORETRY as it is pointless for !__GFP_DIRECT_RECLAIM allocation.

Affected Products

VendorProductVersions
Debian:14linux0, 0, 0
Debian:13linux0, 0, 0
Debian:12linux0, 6.1.27-1, 0
Debian:11linux5.10.162-1, 5.10.178-1, 5.10.149-1

Timeline

  • Dec 30, 2025 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›