CVE-2023-53133

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()

When the buffer length of the recvmsg system call is 0, we got the

flollowing soft lockup problem:

watchdog: BUG: soft lockup - CPU#3 stuck for 27s! [a.out:6149]

CPU: 3 PID: 6149 Comm: a.out Kdump: loaded Not tainted 6.2.0+ #30

Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014

RIP: 0010:remove_wait_queue+0xb/0xc0

Code: 5e 41 5f c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 41 57 <41> 56 41 55 41 54 55 48 89 fd 53 48 89 f3 4c 8d 6b 18 4c 8d 73 20

RSP: 0018:ffff88811b5978b8 EFLAGS: 00000246

RAX: 0000000000000000 RBX: ffff88811a7d3780 RCX: ffffffffb7a4d768

RDX: dffffc0000000000 RSI: ffff88811b597908 RDI: ffff888115408040

RBP: 1ffff110236b2f1b R08: 0000000000000000 R09: ffff88811a7d37e7

R10: ffffed10234fa6fc R11: 0000000000000001 R12: ffff88811179b

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References