Linux Kernel srcu Functionality Issue Affecting Boot CPU Handling

CVE-2023-53671

What is CVE-2023-53671?

A vulnerability exists in the Linux kernel's srcu functionality that assumes CPU 0 is always online, potentially leading to operational issues when other CPUs serve as the boot CPU. This problem becomes evident during special scenarios such as initiating a kdump kernel with a limited number of CPUs, creating a risk of system hang. Under specific conditions, tasks may become unresponsive for extended periods, impacting overall system stability. Linux users should prioritize applying security patches to mitigate this vulnerability's effects.

References