Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2023-53730— blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未使用spin_lock_irqsave保持IRQ状态一致性，可能导致死锁。

AI Predicted 5.5 Difficulty: Moderate EPSS 0.21% · P10

Possible ATT&CK Techniques 1 AI

T1203 · Exploitation for Client Execution

Affected Version Matrix 14

VendorProduct Version RangeStatus
Linux Linux b0853ab4a238c54b8f97ca7dde1ae156e2bbd5e4< 8563b58a4360e648ce18f0e98a75a4be51667431 affected
b0853ab4a238c54b8f97ca7dde1ae156e2bbd5e4< eb120c0aff5ceab9c9c46b87f302465bbf2bbaed affected
b0853ab4a238c54b8f97ca7dde1ae156e2bbd5e4< 8ceeb3fc86a83700bb1585c189006080a47e8506 affected
b0853ab4a238c54b8f97ca7dde1ae156e2bbd5e4< 9279a1b74ad98039d5d44d26b9e7a9cfe655b6d3 affected
b0853ab4a238c54b8f97ca7dde1ae156e2bbd5e4< 3376c4fe2db4aea2dc721a27a999c41fdb45b54f affected
b0853ab4a238c54b8f97ca7dde1ae156e2bbd5e4< 8d211554679d0b23702bd32ba04aeac0c1c4f660 affected
5.10 affected
< 5.10 unaffected
… +6 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-53730

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost adjust_inuse_and_calc_cost() use spin_lock_irq() and IRQ will be enabled when unlock. DEADLOCK might happen if we have held other locks and disabled IRQ before invoking it. Fix it by using spin_lock_irqsave() instead, which can keep IRQ state consistent with before when unlock. ================================ WARNING: inconsistent lock state 5.10.0-02758-g8e5f91fd772f #26 Not tainted -------------------------------- inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage. kworker/2:3/388 [HC0[0]:SC0[0]:HE0:SE1] takes: ffff888118c00c28 (&bfqd->lock){?.-.}-{2:2}, at: spin_lock_irq ffff888118c00c28 (&bfqd->lock){?.-.}-{2:2}, at: bfq_bio_merge+0x141/0x390 {IN-HARDIRQ-W} state was registered at: __lock_acquire+0x3d7/0x1070 lock_acquire+0x197/0x4a0 __raw_spin_lock_irqsave _raw_spin_lock_irqsave+0x3b/0x60 bfq_idle_slice_timer_body bfq_idle_slice_timer+0x53/0x1d0 __run_hrtimer+0x477/0xa70 __hrtimer_run_queues+0x1c6/0x2d0 hrtimer_interrupt+0x302/0x9e0 local_apic_timer_interrupt __sysvec_apic_timer_interrupt+0xfd/0x420 run_sysvec_on_irqstack_cond sysvec_apic_timer_interrupt+0x46/0xa0 asm_sysvec_apic_timer_interrupt+0x12/0x20 irq event stamp: 837522 hardirqs last enabled at (837521): [<ffffffff84b9419d>] __raw_spin_unlock_irqrestore hardirqs last enabled at (837521): [<ffffffff84b9419d>] _raw_spin_unlock_irqrestore+0x3d/0x40 hardirqs last disabled at (837522): [<ffffffff84b93fa3>] __raw_spin_lock_irq hardirqs last disabled at (837522): [<ffffffff84b93fa3>] _raw_spin_lock_irq+0x43/0x50 softirqs last enabled at (835852): [<ffffffff84e00558>] __do_softirq+0x558/0x8ec softirqs last disabled at (835845): [<ffffffff84c010ff>] asm_call_irq_on_stack+0xf/0x20 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&bfqd->lock); <Interrupt> lock(&bfqd->lock); *** DEADLOCK *** 3 locks held by kworker/2:3/388: #0: ffff888107af0f38 ((wq_completion)kthrotld){+.+.}-{0:0}, at: process_one_work+0x742/0x13f0 #1: ffff8881176bfdd8 ((work_completion)(&td->dispatch_work)){+.+.}-{0:0}, at: process_one_work+0x777/0x13f0 #2: ffff888118c00c28 (&bfqd->lock){?.-.}-{2:2}, at: spin_lock_irq #2: ffff888118c00c28 (&bfqd->lock){?.-.}-{2:2}, at: bfq_bio_merge+0x141/0x390 stack backtrace: CPU: 2 PID: 388 Comm: kworker/2:3 Not tainted 5.10.0-02758-g8e5f91fd772f #26 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Workqueue: kthrotld blk_throtl_dispatch_work_fn Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x107/0x167 print_usage_bug valid_state mark_lock_irq.cold+0x32/0x3a mark_lock+0x693/0xbc0 mark_held_locks+0x9e/0xe0 __trace_hardirqs_on_caller lockdep_hardirqs_on_prepare.part.0+0x151/0x360 trace_hardirqs_on+0x5b/0x180 __raw_spin_unlock_irq _raw_spin_unlock_irq+0x24/0x40 spin_unlock_irq adjust_inuse_and_calc_cost+0x4fb/0x970 ioc_rqos_merge+0x277/0x740 __rq_qos_merge+0x62/0xb0 rq_qos_merge bio_attempt_back_merge+0x12c/0x4a0 blk_mq_sched_try_merge+0x1b6/0x4d0 bfq_bio_merge+0x24a/0x390 __blk_mq_sched_bio_merge+0xa6/0x460 blk_mq_sched_bio_merge blk_mq_submit_bio+0x2e7/0x1ee0 __submit_bio_noacct_mq+0x175/0x3b0 submit_bio_noacct+0x1fb/0x270 blk_throtl_dispatch_work_fn+0x1ef/0x2b0 process_one_work+0x83e/0x13f0 process_scheduled_works worker_thread+0x7e3/0xd80 kthread+0x353/0x470 ret_from_fork+0x1f/0x30
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未使用spin_lock_irqsave保持IRQ状态一致性，可能导致死锁。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux b0853ab4a238c54b8f97ca7dde1ae156e2bbd5e4 ~ 8563b58a4360e648ce18f0e98a75a4be51667431 -
Linux Linux 5.10 -

II. Public POCs for CVE-2023-53730

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-53730

请登录查看更多情报信息。

Patches & Fixes for CVE-2023-53730 (6)

Same Patch Batch · Linux · 2025-10-22 · 67 CVEs total

CVE-2023-53711 8.2 HIGH NFS: Fix a potential data corruption
CVE-2023-53705 8.2 HIGH ipv6: Fix out-of-bounds access in ipv6_find_tlv()
CVE-2023-53713 7.8 HIGH arm64: sme: Use STR P to clear FFR context field in streaming SVE mode
CVE-2022-50581 7.8 HIGH hfs: fix OOB Read in __hfs_brec_find
CVE-2023-53718 7.8 HIGH ring-buffer: Do not swap cpu_buffer during resize process
CVE-2022-50569 7.8 HIGH xfrm: Update ipcomp_scratches with NULL when freed
CVE-2022-50570 7.8 HIGH platform/chrome: fix memory corruption in ioctl
CVE-2022-50567 7.8 HIGH fs: jfs: fix shift-out-of-bounds in dbAllocAG
CVE-2023-53707 7.8 HIGH drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1
CVE-2023-53692 7.8 HIGH ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline
CVE-2023-53729 7.8 HIGH soc: qcom: qmi_encdec: Restrict string length in decode
CVE-2023-53698 7.8 HIGH xsk: fix refcount underflow in error path
CVE-2023-53695 7.8 HIGH udf: Detect system inodes linked into directory hierarchy
CVE-2023-53726 7.1 HIGH arm64: csum: Fix OoB access in IP checksum code for negative lengths
CVE-2023-53716 net: fix skb leak in __skb_tstamp_tx()
CVE-2023-53708 ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects
CVE-2023-53704 clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe()
CVE-2023-53712 ARM: 9317/1: kexec: Make smp stop calls asynchronous
CVE-2023-53702 s390/crypto: use vector instructions only if available for ChaCha20
CVE-2023-53706 mm/vmemmap/devdax: fix kernel crash when probing devdax devices

Showing top 20 of 67 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2023-53730

No comments yet

Leave a comment