CVE-2023-53233

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net/smc: fix deadlock triggered by cancel_delayed_work_syn()

The following LOCKDEP was detected:

Workqueue: events smc_lgr_free_work [smc]

WARNING: possible circular locking dependency detected

6.1.0-20221027.rc2.git8.56bc5b569087.300.fc36.s390x+debug #1 Not tainted

------------------------------------------------------

kworker/3:0/176251 is trying to acquire lock:

00000000f1467148 ((wq_completion)smc_tx_wq-00000000#2){+.+.}-{0:0},

at: __flush_workqueue+0x7a/0x4f0

but task is already holding lock:

0000037fffe97dc8 ((work_completion)(&(&lgr->free_work)->work)){+.+.}-{0:0},

at: process_one_work+0x232/0x730

which lock already depends on the new lock.

the existing dependency chain (in reverse order) is:

-> #4 ((work_completion)(&(&lgr->free_work)->work)){+.+.}-{0:0}:

__lock_acquire+0x58e/0xbd8

lock_acquire.part.0+0xe2/0x248

lock_acquire+0xac/0x1c8

__flush_wo

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References