Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2023-53859— s390/idle: mark arch_cpu_idle() noinstr

EPSS 0.22% · P13

Possible ATT&CK Techniques 1AI

T1059 · Command and Scripting Interpreter

Affected Version Matrix 12

VendorProductVersion RangeStatus
LinuxLinux1098582a0f6c4e8fd28da0a6305f9233d02c9c1d< 49aa49952116b8fd56bfb1e8c69bce179f49beceaffected
1098582a0f6c4e8fd28da0a6305f9233d02c9c1d< 611c390217106c46e24e1af3db83187339d447eaaffected
1098582a0f6c4e8fd28da0a6305f9233d02c9c1d< fc60c4f12d8a056f20d8f4d0086a36c68ffa9fdcaffected
1098582a0f6c4e8fd28da0a6305f9233d02c9c1d< a9cbc1b471d291c865907542394f1c483b93a811affected
788621afda4101ca0fae48de424040cda78193feaffected
4.19.297< 4.20affected
5.9affected
< 5.9unaffected
… +4 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-53859

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
s390/idle: mark arch_cpu_idle() noinstr
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: s390/idle: mark arch_cpu_idle() noinstr linux-next commit ("cpuidle: tracing: Warn about !rcu_is_watching()") adds a new warning which hits on s390's arch_cpu_idle() function: RCU not on for: arch_cpu_idle+0x0/0x28 WARNING: CPU: 2 PID: 0 at include/linux/trace_recursion.h:162 arch_ftrace_ops_list_func+0x24c/0x258 Modules linked in: CPU: 2 PID: 0 Comm: swapper/2 Not tainted 6.2.0-rc6-next-20230202 #4 Hardware name: IBM 8561 T01 703 (z/VM 7.3.0) Krnl PSW : 0404d00180000000 00000000002b55c0 (arch_ftrace_ops_list_func+0x250/0x258) R:0 T:1 IO:0 EX:0 Key:0 M:1 W:0 P:0 AS:3 CC:1 PM:0 RI:0 EA:3 Krnl GPRS: c0000000ffffbfff 0000000080000002 0000000000000026 0000000000000000 0000037ffffe3a28 0000037ffffe3a20 0000000000000000 0000000000000000 0000000000000000 0000000000f4acf6 00000000001044f0 0000037ffffe3cb0 0000000000000000 0000000000000000 00000000002b55bc 0000037ffffe3bb8 Krnl Code: 00000000002b55b0: c02000840051 larl %r2,0000000001335652 00000000002b55b6: c0e5fff512d1 brasl %r14,0000000000157b58 #00000000002b55bc: af000000 mc 0,0 >00000000002b55c0: a7f4ffe7 brc 15,00000000002b558e 00000000002b55c4: 0707 bcr 0,%r7 00000000002b55c6: 0707 bcr 0,%r7 00000000002b55c8: eb6ff0480024 stmg %r6,%r15,72(%r15) 00000000002b55ce: b90400ef lgr %r14,%r15 Call Trace: [<00000000002b55c0>] arch_ftrace_ops_list_func+0x250/0x258 ([<00000000002b55bc>] arch_ftrace_ops_list_func+0x24c/0x258) [<0000000000f5f0fc>] ftrace_common+0x1c/0x20 [<00000000001044f6>] arch_cpu_idle+0x6/0x28 [<0000000000f4acf6>] default_idle_call+0x76/0x128 [<00000000001cc374>] do_idle+0xf4/0x1b0 [<00000000001cc6ce>] cpu_startup_entry+0x36/0x40 [<0000000000119d00>] smp_start_secondary+0x140/0x150 [<0000000000f5d2ae>] restart_int_handler+0x6e/0x90 Mark arch_cpu_idle() noinstr like all other architectures with CONFIG_ARCH_WANTS_NO_INSTR (should) have it to fix this.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞,该漏洞源于s390 idle未标记arch_cpu_idle为noinstr,可能导致RCU警告。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 1098582a0f6c4e8fd28da0a6305f9233d02c9c1d ~ 49aa49952116b8fd56bfb1e8c69bce179f49bece -
LinuxLinux 5.9 -

II. Public POCs for CVE-2023-53859

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-53859

登录查看更多情报信息。

Same Patch Batch · Linux · 2025-12-09 · 152 CVEs total

CVE-2025-403439.8 CRITICALnvmet-fc: avoid scheduling association deletion twice
CVE-2023-537949.8 CRITICALcifs: fix session state check in reconnect to avoid use-after-free issue
CVE-2022-506669.8 CRITICALRDMA/siw: Fix QP destroy to wait for all references dropped.
CVE-2023-538278.8 HIGHBluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}
CVE-2023-537858.8 HIGHmt76: mt7921: don't assume adequate headroom for SDIO headers
CVE-2023-538228.8 HIGHwifi: ath11k: Ignore frags from uninitialized peer in dp.
CVE-2025-403368.8 HIGHdrm/gpusvm: fix hmm_pfn_to_map_order() usage
CVE-2025-403428.8 HIGHnvme-fc: use lock accessing port_state and rport state
CVE-2025-403288.8 HIGHsmb: client: fix potential UAF in smb2_close_cached_fid()
CVE-2023-538518.4 HIGHdrm/msm/dp: Drop aux devices together with DP controller
CVE-2025-403378.2 HIGHnet: stmmac: Correctly handle Rx checksum offload errors
CVE-2022-506568.1 HIGHnfc: pn533: Clear nfc_target before being used
CVE-2023-538038.1 HIGHscsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()
CVE-2023-538047.8 HIGHnilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()
CVE-2023-538197.8 HIGHamdgpu: validate offset_in_bo of drm_amdgpu_gem_va
CVE-2023-538167.8 HIGHdrm/amdkfd: fix potential kgd_mem UAFs
CVE-2023-538007.8 HIGHubi: Fix use-after-free when volume resizing failed
CVE-2023-537907.8 HIGHbpf: Zeroing allocated object from slab in bpf memory allocator
CVE-2023-537957.8 HIGHiommufd: IOMMUFD_DESTROY should not increase the refcount
CVE-2023-538107.8 HIGHblk-mq: release crypto keyslot before reporting I/O complete

Showing top 20 of 152 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

V. Comments for CVE-2023-53859

No comments yet


Leave a comment