CVE-2023-53857
kernel: bpf: bpf_sk_storage: Fix invalid wait context lockdep report
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 9, 2025
Updated · June 30, 2026
Description
A locking context violation was found in the BPF socket local storage implementation in the Linux kernel. The code attempts to allocate memory (via kzalloc) while holding a raw_spin_lock, which is unsafe for PREEMPT_RT kernels. This can cause lockdep warnings and potential issues on real-time kernels where sleeping with raw spinlocks held is not permitted.
Statement
This is a locking context issue in BPF socket local storage that primarily affects PREEMPT_RT kernels. The impact is limited as it mainly causes lockdep warnings and affects only systems with specific BPF program configurations.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-413 · Improper Resource Locking