CVE-2023-54268
kernel: debugobjects: Don't wake up kswapd from fill_pool()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 30, 2025
Updated · June 30, 2026
Description
A locking issue was found in the Linux kernel's debugobjects subsystem. The fill_pool() function uses GFP_ATOMIC allocation flags, which attempt to wake up kswapd and acquire kswapd_wait::lock. Since fill_pool() may be called with arbitrary locks already held, this can trigger lockdep warnings about potential deadlocks.
Statement
This is primarily a lockdep warning identified by syzbot rather than an exploitable vulnerability. The issue represents a theoretical lock ordering problem in the debugobjects infrastructure that could potentially cause deadlocks under specific conditions, but no practical exploitation path has been demonstrated.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 2.5CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-833 · Deadlock