CVE-2023-54113

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

rcu: dump vmalloc memory info safely

Currently, for double invoke call_rcu(), will dump rcu_head objects memory

info, if the objects is not allocated from the slab allocator, the

vmalloc_dump_obj() will be invoke and the vmap_area_lock spinlock need to

be held, since the call_rcu() can be invoked in interrupt context,

therefore, there is a possibility of spinlock deadlock scenarios.

And in Preempt-RT kernel, the rcutorture test also trigger the following

lockdep warning:

BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48

in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 1, name: swapper/0

preempt_count: 1, expected: 0

RCU nest depth: 1, expected: 1

3 locks held by swapper/0/1:

#0: ffffffffb534ee80 (fullstop_mutex){+.+.}-{4:4}, at: torture_init_begin+0x24/0xa0

#1: ffffffffb5307940 (rcu_read_lock){....}-{1:3}, at: rcu_torture_init+0x1ec7/0x2370

#2: ffffffffb536af40 (vmap_are

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References