In the Linux kernel, the following vulnerability has been resolved:

debugobjects: Don't wake up kswapd from fill_pool()

syzbot is reporting a lockdep warning in fill_pool() because the allocation
from debugobjects is using GFP_ATOMIC, which is (__GFP_HIGH | __GFP_KSWAPD_RECLAIM)
and therefore tries to wake up kswapd, which acquires kswapd_wait::lock.

Since fill_pool() might be called with arbitrary locks held, fill_pool()
should not assume that acquiring kswapd_wait::lock is safe.

Use __GFP_HIGH instead and remove __GFP_NORETRY as it is pointless for
!__GFP_DIRECT_RECLAIM allocation.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00035.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
3ac7fe5a4aab409bd5674d0b070bce97f9d20872 affected < be646802b3dc408c4dc72a3ac32c3f4a0282414d
3ac7fe5a4aab409bd5674d0b070bce97f9d20872 affected < fd673079749bac97bb30f1461df079e6c8e86511
3ac7fe5a4aab409bd5674d0b070bce97f9d20872 affected < aee97eec77029270866c704f66cdf2881cbd2fe1
3ac7fe5a4aab409bd5674d0b070bce97f9d20872 affected < d7fff52c99d52f180d8bef95d8ed8fec6343889c
3ac7fe5a4aab409bd5674d0b070bce97f9d20872 affected < 4c088d30a72d9b8f9c6ae9362222942e4075cb00
3ac7fe5a4aab409bd5674d0b070bce97f9d20872 affected < eb799279fb1f9c63c520fe8c1c41cb9154252db6
Linux Linux affected
Version Status Constraints
2.6.26 affected —
0 unaffected < 2.6.26
5.4.244 unaffected ≤ 5.4.*
5.10.181 unaffected ≤ 5.10.*
5.15.114 unaffected ≤ 5.15.*
6.1.31 unaffected ≤ 6.1.*
6.3.5 unaffected ≤ 6.3.*
6.4 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/4c088d30a72d9b8f9c6ae9362222942e4075cb00 cve-icon cve-icon
https://git.kernel.org/stable/c/aee97eec77029270866c704f66cdf2881cbd2fe1 cve-icon cve-icon
https://git.kernel.org/stable/c/be646802b3dc408c4dc72a3ac32c3f4a0282414d cve-icon cve-icon
https://git.kernel.org/stable/c/d7fff52c99d52f180d8bef95d8ed8fec6343889c cve-icon cve-icon
https://git.kernel.org/stable/c/eb799279fb1f9c63c520fe8c1c41cb9154252db6 cve-icon cve-icon
https://git.kernel.org/stable/c/fd673079749bac97bb30f1461df079e6c8e86511 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025123000-CVE-2023-54268-3ba2@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-54268 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-54268 cve-icon
History

Wed, 31 Dec 2025 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Tue, 30 Dec 2025 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: debugobjects: Don't wake up kswapd from fill_pool() syzbot is reporting a lockdep warning in fill_pool() because the allocation from debugobjects is using GFP_ATOMIC, which is (__GFP_HIGH | __GFP_KSWAPD_RECLAIM) and therefore tries to wake up kswapd, which acquires kswapd_wait::lock. Since fill_pool() might be called with arbitrary locks held, fill_pool() should not assume that acquiring kswapd_wait::lock is safe. Use __GFP_HIGH instead and remove __GFP_NORETRY as it is pointless for !__GFP_DIRECT_RECLAIM allocation.
Title debugobjects: Don't wake up kswapd from fill_pool()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-30T12:15:59.598Z

Reserved: 2025-12-30T12:06:44.518Z

Link: CVE-2023-54268

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-12-30T13:16:15.623

Modified: 2025-12-31T20:42:43.210

Link: CVE-2023-54268

cve-icon Redhat

Severity : Low

Publid Date: 2025-12-30T00:00:00Z

Links: CVE-2023-54268 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.