CVE-2023-53089

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix task hung in ext4_xattr_delete_inode

Syzbot reported a hung task problem:

==================================================================

INFO: task syz-executor232:5073 blocked for more than 143 seconds.

Not tainted 6.2.0-rc2-syzkaller-00024-g512dee0c00ad #0

"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

task:syz-exec232 state:D stack:21024 pid:5073 ppid:5072 flags:0x00004004

Call Trace:

<TASK>

context_switch kernel/sched/core.c:5244 [inline]

__schedule+0x995/0xe20 kernel/sched/core.c:6555

schedule+0xcb/0x190 kernel/sched/core.c:6631

__wait_on_freeing_inode fs/inode.c:2196 [inline]

find_inode_fast+0x35a/0x4c0 fs/inode.c:950

iget_locked+0xb1/0x830 fs/inode.c:1273

__ext4_iget+0x22e/0x3ed0 fs/ext4/inode.c:4861

ext4_xattr_inode_iget+0x68/0x4e0 fs/ext4/xattr.c:389

ext4_xattr_inode_dec_ref_all+0x1a7/0xe50 fs/ext4/xattr.c:1148

ext4_xattr_delete_inode+0xb04/0xcd0 fs/e

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References