In the Linux kernel, the following vulnerability has been resolved:
ARM: 9317/1: kexec: Make smp stop calls asynchronous
If a panic is triggered by a hrtimer interrupt all online cpus will be notified and set offline. But as highlighted by commit 19dbdcb8039c ("smp: Warn on function calls from softirq context") this call should not be made synchronous with disabled interrupts:
softdog: Initiating panic Kernel panic - not syncing: Software Watchdog Timer expired WARNING: CPU: 1 PID: 0 at kernel/smp.c:753 smpcallfunctionmanycond unwindbacktrace: showstack dumpstacklvl _warn warnslowpathfmt smpcallfunctionmanycond smpcallfunction crashsmpsendstop.part.0 machinecrashshutdown _crashkexec panic softdogfire _hrtimerrunqueues hrtimer_interrupt
Make the smp call for machinecrashnonpanic_core() asynchronous.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53712.json",
"cna_assigner": "Linux"
}