CVE Database›CVE-2023-53860

CVE-2023-53860

kernel: dm: don't attempt to queue IO under RCU protection

Loading…

Severity

Moderate

Red Hat Product Security

4.7

CVSS 3.1

Review impact separately from score.

Published · December 9, 2025

Updated · August 5, 2026

Description

A sleep-in-atomic-context bug was found in the Device Mapper subsystem in the Linux kernel. When processing REQ_NOWAIT requests, dm incorrectly submits I/O while holding an RCU read lock, assuming that REQ_NOWAIT means no scheduling can occur. However, mempool_alloc() and other allocation functions may still sleep, leading to sleeping function calls from invalid contexts. This can cause kernel warnings or crashes.

Statement

This is a sleeping-in-atomic-context bug in Device Mapper that can cause kernel warnings and potential issues when using O_DIRECT with RWF_NOWAIT flags on dm devices. The vulnerability requires local access and specific I/O patterns to trigger.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-663 · Use of a Non-reentrant Function in a Concurrent Context