CVE-2023-54268

debugobjects: Don't wake up kswapd from fill_pool()

published December 30, 2025

CVSS
—
EPSS
0%
Percentile
9.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

debugobjects: Don't wake up kswapd from fill_pool()

syzbot is reporting a lockdep warning in fill_pool() because the allocation

from debugobjects is using GFP_ATOMIC, which is (__GFP_HIGH | __GFP_KSWAPD_RECLAIM)

and therefore tries to wake up kswapd, which acquires kswapd_wait::lock.

Since fill_pool() might be called with arbitrary locks held, fill_pool()

should not assume that acquiring kswapd_wait::lock is safe.

Use __GFP_HIGH instead and remove __GFP_NORETRY as it is pointless for

!__GFP_DIRECT_RECLAIM allocation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00205 · 9.9th percentile
Published
2025-12-30T12:15Z
EPSS history
Timeline
  • 30 DEC 12:15Z
    debugobjects: Don't wake up kswapd from fill_pool()
    cvelistv5