CVE-2023-53051

MEDIUM

Linux Kernel 4.0-4.14.312 - Denial of Service via Infinite Loop in dmcrypt_write

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: dm crypt: add cond_resched() to dmcrypt_write() The loop in dmcrypt_write may be running for unbounded amount of time, thus we need cond_resched() in it. This commit fixes the following warning: [ 3391.153255][ C12] watchdog: BUG: soft lockup - CPU#12 stuck for 23s! [dmcrypt_write/2:2897] ... [ 3391.387210][ C12] Call trace: [ 3391.390338][ C12] blk_attempt_bio_merge.part.6+0x38/0x158 [ 3391.395970][ C12] blk_attempt_plug_merge+0xc0/0x1b0 [ 3391.401085][ C12] blk_mq_submit_bio+0x398/0x550 [ 3391.405856][ C12] submit_bio_noacct+0x308/0x380 [ 3391.410630][ C12] dmcrypt_write+0x1e4/0x208 [dm_crypt] [ 3391.416005][ C12] kthread+0x130/0x138 [ 3391.419911][ C12] ret_from_fork+0x10/0x18

Scores

CVSS v3 5.5
EPSS 0.0019
EPSS Percentile 9.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-835
Status published
Products (27)
linux/Kernel 4.0.0 - 4.14.312linux
linux/Kernel 4.15.0 - 4.19.280linux
linux/Kernel 4.20.0 - 5.4.240linux
linux/Kernel 5.11.0 - 5.15.105linux
linux/Kernel 5.16.0 - 6.1.22linux
linux/Kernel 5.5.0 - 5.10.177linux
linux/Kernel 6.2.0 - 6.2.9linux
Linux/Linux < 4.0
Linux/Linux 4.0
Linux/Linux 4.14.312 - 4.14.*
... and 17 more
Published May 02, 2025
Tracked Since Feb 18, 2026