CVE Database
/

CVE-2023-52699

Back to search

CVE-2023-52699

Published: May 19, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: sysv: don't call sb_bread() with pointers_lock held syzbot is reporting sleep in atomic context in SysV filesystem [1], for sb_bread() is called with rw_spinlock held. A "write_lock(&pointers_lock) => read_lock(&pointers_lock) deadlock" bug and a "sb_bread() with write_lock(&pointers_lock)" bug were introduced by "Replace BKL for chain locking with sysvfs-private rwlock" in Linux 2.5.12. Then, "[PATCH] err1-40: sysvfs locking fix" in Linux 2.6.8 fixed the former bug by moving pointers_lock lock to the callers, but instead introduced a "sb_bread() with read_lock(&pointers_lock)" bug (which made this problem easier to hit). Al Viro suggested that why not to do like get_branch()/get_block()/ find_shared() in Minix filesystem does. And doing like that is almost a revert of "[PATCH] err1-40: sysvfs locking fix" except that get_branch() from with find_shared() is called without write_lock(&pointers_lock).

VendorProductVersions

Linux

Linux

affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 13b33feb2ebddc2b1aa607f553566b18a4af1d76
affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 1b4fe801b5bedec2b622ddb18e5c9bf26c63d79f
affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 674c1c4229e743070e09db63a23442950ff000d1
affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < fd203d2c671bdee9ab77090ff394d3b71b627927
affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 53cb1e52c9db618c08335984d1ca80db220ccf09

+3 more versions

Linux

Linux

affected
2.6.12
unaffected
0 - < 2.6.12
unaffected
4.19.312 - <= 4.19.*
unaffected
5.4.274 - <= 5.4.*
unaffected
5.10.215 - <= 5.10.*

+5 more versions

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now