CVE-2023-53655

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed

Registering a kprobe on __rcu_irq_enter_check_tick() can cause kernel

stack overflow as shown below. This issue can be reproduced by enabling

CONFIG_NO_HZ_FULL and booting the kernel with argument "nohz_full=",

and then giving the following commands at the shell prompt:

# cd /sys/kernel/tracing/

# echo 'p:mp1 __rcu_irq_enter_check_tick' >> kprobe_events

# echo 1 > events/kprobes/enable

This commit therefore adds __rcu_irq_enter_check_tick() to the kprobes

blacklist using NOKPROBE_SYMBOL().

Insufficient stack space to handle exception!

ESR: 0x00000000f2000004 -- BRK (AArch64)

FAR: 0x0000ffffccf3e510

Task stack: [0xffff80000ad30000..0xffff80000ad38000]

IRQ stack: [0xffff800008050000..0xffff800008058000]

Overflow stack: [0xffff089c36f9f310..0xffff089c36fa0310]

CPU: 5 PID: 190 Comm: bash Not tainted 6.2.0-rc2-00320-g1f5abbd77e

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References