5.5

CVE-2023-53051: dm crypt: add cond_resched() to dmcrypt_write()

Analyzed
AliasesUBUNTU-CVE-2023-53051DEBIAN-CVE-2023-53051
Published 02-05-2025Last modified 11-05-2026

Vulnerability summary

CVE-2023-53051 is a medium (CVSS 5.5) Infinite Loop vulnerability in linux. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 11.5% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.22%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 7 · Related 5
RHSA-2023:6583RHSA-2023:7077SUSE-SU-2025:01620-1SUSE-SU-2025:01640-1SUSE-SU-2025:01918-1SUSE-SU-2025:01983-1

Timeline

  1. 02-05-2025
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: dm crypt: add cond_resched() to dmcrypt_write() The loop in dmcrypt_write may be running for unbounded amount of time, thus we need cond_resched() in it. This commit fixes the following warning: [ 3391.153255][ C12] watchdog: BUG: soft lockup - CPU#12 stuck for 23s! [dmcrypt_write/2:2897] ... [ 3391.387210][ C12] Call trace: [ 3391.390338][ C12] blk_attempt_bio_merge.part.6+0x38/0x158 [ 3391.395970][ C12] blk_attempt_plug_merge+0xc0/0x1b0 [ 3391.401085][ C12] blk_mq_submit_bio+0x398/0x550 [ 3391.405856][ C12] submit_bio_noacct+0x308/0x380 [ 3391.410630][ C12] dmcrypt_write+0x1e4/0x208 [dm_crypt] [ 3391.416005][ C12] kthread+0x130/0x138 [ 3391.419911][ C12] ret_from_fork+0x10/0x18

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.22%

Chance of exploitation in the next 30 days

Percentile

12%

Versus all other CVEs

30-day change

Increase +0.01 pp

From 0.21% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu116 products
  • linuxAll versions (No fix recorded) | < 5.4.0-156.173 | < 5.15.0-79.86
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.4.0-1107.115 | < 5.15.0-1042.47
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ dc2676210c425ee8e5cb1bec5bc84d004ddf4179, < e87cd83f70504f1cd2e428966f353c007d6d2d7f | ≥ dc2676210c425ee8e5cb1bec5bc84d004ddf4179, < 7b9f8efb5fc888dd938d2964e705b8e00f1dc0f6 | ≥ dc2676210c425ee8e5cb1bec5bc84d004ddf4179, < 885c28ceae7dab2b18c2cc0eb95f1f82b1f629d1 | ≥ dc2676210c425ee8e5cb1bec5bc84d004ddf4179, < 66ff37993dd7e9954b6446237fe2453b380ce40d | ≥ dc2676210c425ee8e5cb1bec5bc84d004ddf4179, < eb485b7404a281d974bd445ddc5b0b8d5958f371 | ≥ dc2676210c425ee8e5cb1bec5bc84d004ddf4179, < f0eb61b493dbbc32529fbd0d2e945b71b0e47306 | ≥ dc2676210c425ee8e5cb1bec5bc84d004ddf4179, < 2c743db1193bf0e76c73d71ede08bd9b96e6c31d | ≥ dc2676210c425ee8e5cb1bec5bc84d004ddf4179, < fb294b1c0ba982144ca467a75e7d01ff26304e2b | 4.0
  • linux_kernel≥ 4.0, < 4.14.312 | ≥ 4.15, < 4.19.280 | ≥ 4.20, < 5.4.240 | ≥ 5.5, < 5.10.177 | ≥ 5.11, < 5.15.105 | ≥ 5.16, < 6.1.22 | ≥ 6.2, < 6.2.9 | 6.3:rc1 | 6.3:rc2 | 6.3:rc3
Debian1 product
  • linux< 6.1.25-1

3 vendors · 119 products

References

12 links
Show all 12 references