Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2023-53099: Linux kernel Xilinx firmware can cause system freeze
CVE-2023-53099 · published 1 year ago
Summary
The Linux kernel code that loads Xilinx device firmware may try to allocate memory in a way that is not allowed, which can trigger a kernel crash and stop the system from running. This affects Linux distributions that include the affected kernel versions, such as standard Linux, Ubuntu HWE, and cloud images for AWS and Azure. Install the latest kernel updates from your Linux vendor to fix the problem.
What to do
- Update canonical linux-aws-5.15 to version 5.15.0-1041.46~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1045.52~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1039.47~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-79.86~20.04.2.
- Update canonical linux-ibm-5.15 to version 5.15.0-1036.39~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1037.42~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-79.88~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1016.16~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1040.46~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1038.42~20.04.2.
- Update canonical linux to version 5.15.0-79.86.
- Update canonical linux-aws to version 5.15.0-1042.47.
- Update canonical linux-azure to version 5.15.0-1045.52.
- Update canonical linux-gcp to version 5.15.0-1039.47.
- Update canonical linux-gke to version 5.15.0-1039.44.
- Update canonical linux-gkeop to version 5.15.0-1025.30.
- Update canonical linux-ibm to version 5.15.0-1035.38.
- Update canonical linux-intel-iotg to version 5.15.0-1037.42.
- Update canonical linux-kvm to version 5.15.0-1039.44.
- Update canonical linux-lowlatency to version 5.15.0-79.88.
- Update canonical linux-nvidia to version 5.15.0-1030.30.
- Update canonical linux-nvidia-tegra to version 5.15.0-1016.16.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1002.2.
- Update canonical linux-oracle to version 5.15.0-1040.46.
- Update canonical linux-raspi to version 5.15.0-1035.38.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1025.29.
- Update canonical linux-bluefield to version 5.15.0-1022.24.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1036.38.
- Update canonical linux-realtime to version 5.15.0-1043.48.
- Update debian linux to version 6.1.25-1.
- Update canonical linux-azure-fde to version 5.15.0-1045.52.1.
- Update linux kernel to version 6.2.8.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 5.9.12, < 5.10 >= 5.10.1, < 5.10.176 >= 5.11, < 5.15.104 >= 5.16, < 6.1.21 >= 6.2, < 6.2.8 5.10 6.3 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1041.46~20.04.1 Fix: upgrade to 5.15.0-1041.46~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1045.52~20.04.1 Fix: upgrade to 5.15.0-1045.52~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1039.47~20.04.1 Fix: upgrade to 5.15.0-1039.47~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-79.86~20.04.2 Fix: upgrade to 5.15.0-79.86~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1036.39~20.04.1 Fix: upgrade to 5.15.0-1036.39~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1037.42~20.04.1 Fix: upgrade to 5.15.0-1037.42~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-79.88~20.04.1 Fix: upgrade to 5.15.0-79.88~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1016.16~20.04.1 Fix: upgrade to 5.15.0-1016.16~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1040.46~20.04.1 Fix: upgrade to 5.15.0-1040.46~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1038.42~20.04.2 Fix: upgrade to 5.15.0-1038.42~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
Showing 50 of 110. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-79.86 Fix: upgrade to 5.15.0-79.86
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1042.47 Fix: upgrade to 5.15.0-1042.47
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1045.52 Fix: upgrade to 5.15.0-1045.52
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1039.47 Fix: upgrade to 5.15.0-1039.47
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1039.44 Fix: upgrade to 5.15.0-1039.44
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1025.30 Fix: upgrade to 5.15.0-1025.30
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1035.38 Fix: upgrade to 5.15.0-1035.38
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1037.42 Fix: upgrade to 5.15.0-1037.42
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1039.44 Fix: upgrade to 5.15.0-1039.44
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-79.88 Fix: upgrade to 5.15.0-79.88
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1030.30 Fix: upgrade to 5.15.0-1030.30
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1016.16 Fix: upgrade to 5.15.0-1016.16
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1002.2 Fix: upgrade to 5.15.0-1002.2
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1040.46 Fix: upgrade to 5.15.0-1040.46
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1035.38 Fix: upgrade to 5.15.0-1035.38
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1025.29 Fix: upgrade to 5.15.0-1025.29
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1022.24 Fix: upgrade to 5.15.0-1022.24
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1036.38 Fix: upgrade to 5.15.0-1036.38
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1043.48 Fix: upgrade to 5.15.0-1043.48
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Debian:12 | debian | linux |
< 6.1.25-1 Fix: upgrade to 6.1.25-1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1045.52.1 Fix: upgrade to 5.15.0-1045.52.1
|
| Linux | linux | kernel |
>= 6.2.0, < 6.2.8 Fix: upgrade to 6.2.8
|
Original advisory text
firmware: xilinx: don't make a sleepable memory allocation from an atomic context
In the Linux kernel, the following vulnerability has been resolved: firmware: xilinx: don't make a sleepable memory allocation from an atomic context The following issue was discovered using lockdep: [ 6.691371] BUG: sleeping function called from invalid context at include/linux/sched/mm.h:209 [ 6.694602] in_atomic(): 1, irqs_disabled(): 128, non_block: 0, pid: 1, name: swapper/0 [ 6.702431] 2 locks held by swapper/0/1: [ 6.706300] #0: ffffff8800f6f188 (&dev->mutex){....}-{3:3}, at: __device_driver_lock+0x4c/0x90 [ 6.714900] #1: ffffffc009a2abb8 (enable_lock){....}-{2:2}, at: clk_enable_lock+0x4c/0x140 [ 6.723156] irq event stamp: 304030 [ 6.726596] hardirqs last enabled at (304029): [<ffffffc008d17ee0>] _raw_spin_unlock_irqrestore+0xc0/0xd0 [ 6.736142] hardirqs last disabled at (304030): [<ffffffc00876bc5c>] clk_enable_lock+0xfc/0x140 [ 6.744742] softirqs last enabled at (303958): [<ffffffc0080904f0>] _stext+0x4f0/0x894 [ 6.752655] softirqs last disabled at (303951): [<ffffffc0080e53b8>] irq_exit+0x238/0x280 [ 6.760744] CPU: 1 PID: 1 Comm: swapper/0 Tainted: G U 5.15.36 #2 [ 6.768048] Hardware name: xlnx,zynqmp (DT) [ 6.772179] Call trace: [ 6.774584] dump_backtrace+0x0/0x300 [ 6.778197] show_stack+0x18/0x30 [ 6.781465] dump_stack_lvl+0xb8/0xec [ 6.785077] dump_stack+0x1c/0x38 [ 6.788345] ___might_sleep+0x1a8/0x2a0 [ 6.792129] __might_sleep+0x6c/0xd0 [ 6.795655] kmem_cache_alloc_trace+0x270/0x3d0 [ 6.800127] do_feature_check_call+0x100/0x220 [ 6.804513] zynqmp_pm_invoke_fn+0x8c/0xb0 [ 6.808555] zynqmp_pm_clock_getstate+0x90/0xe0 [ 6.813027] zynqmp_pll_is_enabled+0x8c/0x120 [ 6.817327] zynqmp_pll_enable+0x38/0xc0 [ 6.821197] clk_core_enable+0x144/0x400 [ 6.825067] clk_core_enable+0xd4/0x400 [ 6.828851] clk_core_enable+0xd4/0x400 [ 6.832635] clk_core_enable+0xd4/0x400 [ 6.836419] clk_core_enable+0xd4/0x400 [ 6.840203] clk_core_enable+0xd4/0x400 [ 6.843987] clk_core_enable+0xd4/0x400 [ 6.847771] clk_core_enable+0xd4/0x400 [ 6.851555] clk_core_enable_lock+0x24/0x50 [ 6.855683] clk_enable+0x24/0x40 [ 6.858952] fclk_probe+0x84/0xf0 [ 6.862220] platform_probe+0x8c/0x110 [ 6.865918] really_probe+0x110/0x5f0 [ 6.869530] __driver_probe_device+0xcc/0x210 [ 6.873830] driver_probe_device+0x64/0x140 [ 6.877958] __driver_attach+0x114/0x1f0 [ 6.881828] bus_for_each_dev+0xe8/0x160 [ 6.885698] driver_attach+0x34/0x50 [ 6.889224] bus_add_driver+0x228/0x300 [ 6.893008] driver_register+0xc0/0x1e0 [ 6.896792] __platform_driver_register+0x44/0x60 [ 6.901436] fclk_driver_init+0x1c/0x28 [ 6.905220] do_one_initcall+0x104/0x590 [ 6.909091] kernel_init_freeable+0x254/0x2bc [ 6.913390] kernel_init+0x24/0x130 [ 6.916831] ret_from_fork+0x10/0x20 Fix it by passing the GFP_ATOMIC gfp flag for the corresponding memory allocation.
References
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53099... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-53099 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://ubuntu.com/security/CVE-2023-53099 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-53099 Third Party Advisory
- https://git.kernel.org/linus/38ed310c22e7a0fc978b1f8292136a4a4a8b3051 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2023-53099 Vendor Advisory
- https://git.kernel.org/stable/c/162049c31eb64308afa22e341a257a723526eb5c Third Party Advisory
- https://git.kernel.org/stable/c/38ed310c22e7a0fc978b1f8292136a4a4a8b3051 Third Party Advisory
- https://git.kernel.org/stable/c/86afb633beaa02ee95b5126a14c9f22cfade4fd9 Third Party Advisory
- https://git.kernel.org/stable/c/9bbab2843f2d1337a268499a1c02b435d2985a17 Third Party Advisory
- https://git.kernel.org/stable/c/b37d3ccbd549494890672136a0e623eb010d46a7 Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-667Improper Locking
Timeline
Published2 May 2025
Updated30 Oct 2026
First seen7 Mar 2026
Sources
CVE-2023-53099 · NVD
CVE-2023-53099 · OSV
UBUNTU-CVE-2023-53099 · OSV
DEBIAN-CVE-2023-53099 · OSV
Track software like this
Free during beta