CVE-2023-53815

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the posix-timers functionality, specifically within the itimer delete() function. A retry loop within this function, when handling concurrent timer expiration, can lead to a real-time livelock situation on RT kernels and systems with HAVE POSIX CPU TIMERS TASK WORK enabled. This occurs when a task preempts the task responsible for timer delivery. The issue is addressed by replacing spin unlock() with a call to timer wait running() to align the handling with other retry loops in the posix timer code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.