CVE-2023-53029

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt

The commit 4af1b64f80fb ("octeontx2-pf: Fix lmtst ID used in aura

free") uses the get/put_cpu() to protect the usage of percpu pointer

in ->aura_freeptr() callback, but it also unnecessarily disable the

preemption for the blockable memory allocation. The commit 87b93b678e95

("octeontx2-pf: Avoid use of GFP_KERNEL in atomic context") tried to

fix these sleep inside atomic warnings. But it only fix the one for

the non-rt kernel. For the rt kernel, we still get the similar warnings

like below.

BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:46

in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 1, name: swapper/0

preempt_count: 1, expected: 0

RCU nest depth: 0, expected: 0

3 locks held by swapper/0/1:

#0: ffff800009fc5fe8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x24/0x30

#1: ffff000100c276c0 (&mbox->lock

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References