GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2023-52813 (GCVE-0-2023-52813)

Vulnerability from cvelistv5 – Published: 2024-05-21 15:31 – Updated: 2026-05-11 19:33
VLAI
Title
crypto: pcrypt - Fix hungtask for PADATA_RESET
Summary
In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix hungtask for PADATA_RESET We found a hungtask bug in test_aead_vec_cfg as follows: INFO: task cryptomgr_test:391009 blocked for more than 120 seconds. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. Call trace: __switch_to+0x98/0xe0 __schedule+0x6c4/0xf40 schedule+0xd8/0x1b4 schedule_timeout+0x474/0x560 wait_for_common+0x368/0x4e0 wait_for_completion+0x20/0x30 wait_for_completion+0x20/0x30 test_aead_vec_cfg+0xab4/0xd50 test_aead+0x144/0x1f0 alg_test_aead+0xd8/0x1e0 alg_test+0x634/0x890 cryptomgr_test+0x40/0x70 kthread+0x1e0/0x220 ret_from_fork+0x10/0x18 Kernel panic - not syncing: hung_task: blocked tasks For padata_do_parallel, when the return err is 0 or -EBUSY, it will call wait_for_completion(&wait->completion) in test_aead_vec_cfg. In normal case, aead_request_complete() will be called in pcrypt_aead_serial and the return err is 0 for padata_do_parallel. But, when pinst->flags is PADATA_RESET, the return err is -EBUSY for padata_do_parallel, and it won't call aead_request_complete(). Therefore, test_aead_vec_cfg will hung at wait_for_completion(&wait->completion), which will cause hungtask. The problem comes as following: (padata_do_parallel) | rcu_read_lock_bh(); | err = -EINVAL; | (padata_replace) | pinst->flags |= PADATA_RESET; err = -EBUSY | if (pinst->flags & PADATA_RESET) | rcu_read_unlock_bh() | return err In order to resolve the problem, we replace the return err -EBUSY with -EAGAIN, which means parallel_data is changing, and the caller should call it again. v3: remove retry and just change the return err. v2: introduce padata_try_do_parallel() in pcrypt_aead_encrypt and pcrypt_aead_decrypt to solve the hungtask.
Severity
No CVSS data available.
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-05-23 17:18 UTC
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 16295bec6398a3eedc9377e1af6ff4c71b98c300 , < fb2d3a50a8f29a3c66682bb426144f40e32ab818 (git)
Affected: 16295bec6398a3eedc9377e1af6ff4c71b98c300 , < 039fec48e062504f14845124a1a25eb199b2ddc0 (git)
Affected: 16295bec6398a3eedc9377e1af6ff4c71b98c300 , < c9c1334697301c10e6918d747ed38abfbc0c96e7 (git)
Affected: 16295bec6398a3eedc9377e1af6ff4c71b98c300 , < e97bf4ada7dddacd184c3e196bd063b0dc71b41d (git)
Affected: 16295bec6398a3eedc9377e1af6ff4c71b98c300 , < 546c1796ad1ed0d87dab3c4b5156d75819be2316 (git)
Affected: 16295bec6398a3eedc9377e1af6ff4c71b98c300 , < c55fc098fd9d2dca475b82d00ffbcaf97879d77e (git)
Affected: 16295bec6398a3eedc9377e1af6ff4c71b98c300 , < e134f3aba98e6c801a693f540912c2d493718ddf (git)
Affected: 16295bec6398a3eedc9377e1af6ff4c71b98c300 , < 372636debe852913529b1716f44addd94fff2d28 (git)
Affected: 16295bec6398a3eedc9377e1af6ff4c71b98c300 , < 8f4f68e788c3a7a696546291258bfa5fdb215523 (git)
guessed Create a notification for this product.
Linux Linux Affected: 2.6.34
Unaffected: 0 , < 2.6.34 (semver)
Unaffected: 4.14.331 , ≤ 4.14.* (semver)
Unaffected: 4.19.300 , ≤ 4.19.* (semver)
Unaffected: 5.4.262 , ≤ 5.4.* (semver)
Unaffected: 5.10.202 , ≤ 5.10.* (semver)
Unaffected: 5.15.140 , ≤ 5.15.* (semver)
Unaffected: 6.1.64 , ≤ 6.1.* (semver)
Unaffected: 6.5.13 , ≤ 6.5.* (semver)
Unaffected: 6.6.3 , ≤ 6.6.* (semver)
Unaffected: 6.7 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-52813",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-23T17:18:51.048604Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:24:13.216Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T23:11:36.058Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/fb2d3a50a8f29a3c66682bb426144f40e32ab818"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/039fec48e062504f14845124a1a25eb199b2ddc0"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c9c1334697301c10e6918d747ed38abfbc0c96e7"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e97bf4ada7dddacd184c3e196bd063b0dc71b41d"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/546c1796ad1ed0d87dab3c4b5156d75819be2316"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c55fc098fd9d2dca475b82d00ffbcaf97879d77e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e134f3aba98e6c801a693f540912c2d493718ddf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/372636debe852913529b1716f44addd94fff2d28"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/8f4f68e788c3a7a696546291258bfa5fdb215523"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "crypto/pcrypt.c",
            "kernel/padata.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "fb2d3a50a8f29a3c66682bb426144f40e32ab818",
              "status": "affected",
              "version": "16295bec6398a3eedc9377e1af6ff4c71b98c300",
              "versionType": "git"
            },
            {
              "lessThan": "039fec48e062504f14845124a1a25eb199b2ddc0",
              "status": "affected",
              "version": "16295bec6398a3eedc9377e1af6ff4c71b98c300",
              "versionType": "git"
            },
            {
              "lessThan": "c9c1334697301c10e6918d747ed38abfbc0c96e7",
              "status": "affected",
              "version": "16295bec6398a3eedc9377e1af6ff4c71b98c300",
              "versionType": "git"
            },
            {
              "lessThan": "e97bf4ada7dddacd184c3e196bd063b0dc71b41d",
              "status": "affected",
              "version": "16295bec6398a3eedc9377e1af6ff4c71b98c300",
              "versionType": "git"
            },
            {
              "lessThan": "546c1796ad1ed0d87dab3c4b5156d75819be2316",
              "status": "affected",
              "version": "16295bec6398a3eedc9377e1af6ff4c71b98c300",
              "versionType": "git"
            },
            {
              "lessThan": "c55fc098fd9d2dca475b82d00ffbcaf97879d77e",
              "status": "affected",
              "version": "16295bec6398a3eedc9377e1af6ff4c71b98c300",
              "versionType": "git"
            },
            {
              "lessThan": "e134f3aba98e6c801a693f540912c2d493718ddf",
              "status": "affected",
              "version": "16295bec6398a3eedc9377e1af6ff4c71b98c300",
              "versionType": "git"
            },
            {
              "lessThan": "372636debe852913529b1716f44addd94fff2d28",
              "status": "affected",
              "version": "16295bec6398a3eedc9377e1af6ff4c71b98c300",
              "versionType": "git"
            },
            {
              "lessThan": "8f4f68e788c3a7a696546291258bfa5fdb215523",
              "status": "affected",
              "version": "16295bec6398a3eedc9377e1af6ff4c71b98c300",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "crypto/pcrypt.c",
            "kernel/padata.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.34"
            },
            {
              "lessThan": "2.6.34",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.331",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.300",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.262",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.202",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.64",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.13",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.7",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.331",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.300",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.262",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.202",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.140",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.64",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.13",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.3",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.7",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: pcrypt - Fix hungtask for PADATA_RESET\n\nWe found a hungtask bug in test_aead_vec_cfg as follows:\n\nINFO: task cryptomgr_test:391009 blocked for more than 120 seconds.\n\"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\nCall trace:\n __switch_to+0x98/0xe0\n __schedule+0x6c4/0xf40\n schedule+0xd8/0x1b4\n schedule_timeout+0x474/0x560\n wait_for_common+0x368/0x4e0\n wait_for_completion+0x20/0x30\n wait_for_completion+0x20/0x30\n test_aead_vec_cfg+0xab4/0xd50\n test_aead+0x144/0x1f0\n alg_test_aead+0xd8/0x1e0\n alg_test+0x634/0x890\n cryptomgr_test+0x40/0x70\n kthread+0x1e0/0x220\n ret_from_fork+0x10/0x18\n Kernel panic - not syncing: hung_task: blocked tasks\n\nFor padata_do_parallel, when the return err is 0 or -EBUSY, it will call\nwait_for_completion(\u0026wait-\u003ecompletion) in test_aead_vec_cfg. In normal\ncase, aead_request_complete() will be called in pcrypt_aead_serial and the\nreturn err is 0 for padata_do_parallel. But, when pinst-\u003eflags is\nPADATA_RESET, the return err is -EBUSY for padata_do_parallel, and it\nwon\u0027t call aead_request_complete(). Therefore, test_aead_vec_cfg will\nhung at wait_for_completion(\u0026wait-\u003ecompletion), which will cause\nhungtask.\n\nThe problem comes as following:\n(padata_do_parallel)                 |\n    rcu_read_lock_bh();              |\n    err = -EINVAL;                   |   (padata_replace)\n                                     |     pinst-\u003eflags |= PADATA_RESET;\n    err = -EBUSY                     |\n    if (pinst-\u003eflags \u0026 PADATA_RESET) |\n        rcu_read_unlock_bh()         |\n        return err\n\nIn order to resolve the problem, we replace the return err -EBUSY with\n-EAGAIN, which means parallel_data is changing, and the caller should call\nit again.\n\nv3:\nremove retry and just change the return err.\nv2:\nintroduce padata_try_do_parallel() in pcrypt_aead_encrypt and\npcrypt_aead_decrypt to solve the hungtask."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:33:36.420Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/fb2d3a50a8f29a3c66682bb426144f40e32ab818"
        },
        {
          "url": "https://git.kernel.org/stable/c/039fec48e062504f14845124a1a25eb199b2ddc0"
        },
        {
          "url": "https://git.kernel.org/stable/c/c9c1334697301c10e6918d747ed38abfbc0c96e7"
        },
        {
          "url": "https://git.kernel.org/stable/c/e97bf4ada7dddacd184c3e196bd063b0dc71b41d"
        },
        {
          "url": "https://git.kernel.org/stable/c/546c1796ad1ed0d87dab3c4b5156d75819be2316"
        },
        {
          "url": "https://git.kernel.org/stable/c/c55fc098fd9d2dca475b82d00ffbcaf97879d77e"
        },
        {
          "url": "https://git.kernel.org/stable/c/e134f3aba98e6c801a693f540912c2d493718ddf"
        },
        {
          "url": "https://git.kernel.org/stable/c/372636debe852913529b1716f44addd94fff2d28"
        },
        {
          "url": "https://git.kernel.org/stable/c/8f4f68e788c3a7a696546291258bfa5fdb215523"
        }
      ],
      "title": "crypto: pcrypt - Fix hungtask for PADATA_RESET",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-52813",
    "datePublished": "2024-05-21T15:31:21.604Z",
    "dateReserved": "2024-05-21T15:19:24.248Z",
    "dateUpdated": "2026-05-11T19:33:36.420Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-52813",
      "date": "2026-09-16",
      "epss": "0.00286",
      "percentile": "0.21153"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\ncrypto: pcrypt - Fix hungtask for PADATA_RESET\\n\\nWe found a hungtask bug in test_aead_vec_cfg as follows:\\n\\nINFO: task cryptomgr_test:391009 blocked for more than 120 seconds.\\n\\\"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\\\" disables this message.\\nCall trace:\\n __switch_to+0x98/0xe0\\n __schedule+0x6c4/0xf40\\n schedule+0xd8/0x1b4\\n schedule_timeout+0x474/0x560\\n wait_for_common+0x368/0x4e0\\n wait_for_completion+0x20/0x30\\n wait_for_completion+0x20/0x30\\n test_aead_vec_cfg+0xab4/0xd50\\n test_aead+0x144/0x1f0\\n alg_test_aead+0xd8/0x1e0\\n alg_test+0x634/0x890\\n cryptomgr_test+0x40/0x70\\n kthread+0x1e0/0x220\\n ret_from_fork+0x10/0x18\\n Kernel panic - not syncing: hung_task: blocked tasks\\n\\nFor padata_do_parallel, when the return err is 0 or -EBUSY, it will call\\nwait_for_completion(\u0026wait-\u003ecompletion) in test_aead_vec_cfg. In normal\\ncase, aead_request_complete() will be called in pcrypt_aead_serial and the\\nreturn err is 0 for padata_do_parallel. But, when pinst-\u003eflags is\\nPADATA_RESET, the return err is -EBUSY for padata_do_parallel, and it\\nwon\u0027t call aead_request_complete(). Therefore, test_aead_vec_cfg will\\nhung at wait_for_completion(\u0026wait-\u003ecompletion), which will cause\\nhungtask.\\n\\nThe problem comes as following:\\n(padata_do_parallel)                 |\\n    rcu_read_lock_bh();              |\\n    err = -EINVAL;                   |   (padata_replace)\\n                                     |     pinst-\u003eflags |= PADATA_RESET;\\n    err = -EBUSY                     |\\n    if (pinst-\u003eflags \u0026 PADATA_RESET) |\\n        rcu_read_unlock_bh()         |\\n        return err\\n\\nIn order to resolve the problem, we replace the return err -EBUSY with\\n-EAGAIN, which means parallel_data is changing, and the caller should call\\nit again.\\n\\nv3:\\nremove retry and just change the return err.\\nv2:\\nintroduce padata_try_do_parallel() in pcrypt_aead_encrypt and\\npcrypt_aead_decrypt to solve the hungtask.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se resolvi\\u00f3 la siguiente vulnerabilidad: crypto: pcrypt - Reparar hungtask para PADATA_RESET. Encontramos un error de hungtask en test_aead_vec_cfg de la siguiente manera: INFORMACI\\u00d3N: tarea cryptomgr_test:391009 bloqueada durante m\\u00e1s de 120 segundos. \\\"echo 0 \u0026gt; /proc/sys/kernel/hung_task_timeout_secs\\\" desactiva este mensaje. Seguimiento de llamadas: __switch_to+0x98/0xe0 __schedule+0x6c4/0xf40 Schedule+0xd8/0x1b4 Schedule_timeout+0x474/0x560 wait_for_common+0x368/0x4e0 wait_for_completion+0x20/0x30 wait_for_completion+0x20/0x30 test_aead_ve c_cfg+0xab4/0xd50 test_aead+0x144/0x1f0 alg_test_aead+ 0xd8/0x1e0 alg_test+0x634/0x890 cryptomgr_test+0x40/0x70 kthread+0x1e0/0x220 ret_from_fork+0x10/0x18 kernel panic - no syncing: hung_task: tareas bloqueadas para el error for_completion (\u0026amp;esperar-\u0026gt;finalizaci\\u00f3n) en test_aead_vec_cfg. En caso normal, se llamar\\u00e1 aead_request_complete() en pcrypt_aead_serial y el error de retorno es 0 para padata_do_parallel. Pero, cuando pinst-\u0026gt;flags es PADATA_RESET, el error de retorno es -EBUSY para padata_do_parallel y no llamar\\u00e1 a aead_request_complete(). Por lo tanto, test_aead_vec_cfg se colgar\\u00e1 en wait_for_completion(\u0026amp;wait-\u0026gt;completion), lo que provocar\\u00e1 que se cuelgue la tarea. El problema viene de la siguiente manera: (padata_do_parallel) | rcu_read_lock_bh(); | err = -EINVAL; | (padata_replace) | pinst-\u0026gt;flags |= PADATA_RESET; err = -EBUSY | si (pinst-\u0026gt;flags \u0026amp; PADATA_RESET) | rcu_read_unlock_bh() | return err Para resolver el problema, reemplazamos el retorno err -EBUSY con -EAGAIN, lo que significa que los datos_paralelos est\\u00e1n cambiando y la persona que llama debe llamarlo nuevamente. v3: elimine el reintento y simplemente cambie el error de devoluci\\u00f3n. v2: introduce padata_try_do_parallel() en pcrypt_aead_encrypt y pcrypt_aead_decrypt para resolver la tarea colgada.\"}]",
      "id": "CVE-2023-52813",
      "lastModified": "2024-11-21T08:40:38.687",
      "published": "2024-05-21T16:15:19.477",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/039fec48e062504f14845124a1a25eb199b2ddc0\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/372636debe852913529b1716f44addd94fff2d28\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/546c1796ad1ed0d87dab3c4b5156d75819be2316\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/8f4f68e788c3a7a696546291258bfa5fdb215523\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/c55fc098fd9d2dca475b82d00ffbcaf97879d77e\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/c9c1334697301c10e6918d747ed38abfbc0c96e7\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/e134f3aba98e6c801a693f540912c2d493718ddf\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/e97bf4ada7dddacd184c3e196bd063b0dc71b41d\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/fb2d3a50a8f29a3c66682bb426144f40e32ab818\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/039fec48e062504f14845124a1a25eb199b2ddc0\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/372636debe852913529b1716f44addd94fff2d28\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/546c1796ad1ed0d87dab3c4b5156d75819be2316\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/8f4f68e788c3a7a696546291258bfa5fdb215523\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/c55fc098fd9d2dca475b82d00ffbcaf97879d77e\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/c9c1334697301c10e6918d747ed38abfbc0c96e7\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/e134f3aba98e6c801a693f540912c2d493718ddf\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/e97bf4ada7dddacd184c3e196bd063b0dc71b41d\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/fb2d3a50a8f29a3c66682bb426144f40e32ab818\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Awaiting Analysis"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-52813\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-21T16:15:19.477\",\"lastModified\":\"2026-06-17T06:43:38.660\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ncrypto: pcrypt - Fix hungtask for PADATA_RESET\\n\\nWe found a hungtask bug in test_aead_vec_cfg as follows:\\n\\nINFO: task cryptomgr_test:391009 blocked for more than 120 seconds.\\n\\\"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\\\" disables this message.\\nCall trace:\\n __switch_to+0x98/0xe0\\n __schedule+0x6c4/0xf40\\n schedule+0xd8/0x1b4\\n schedule_timeout+0x474/0x560\\n wait_for_common+0x368/0x4e0\\n wait_for_completion+0x20/0x30\\n wait_for_completion+0x20/0x30\\n test_aead_vec_cfg+0xab4/0xd50\\n test_aead+0x144/0x1f0\\n alg_test_aead+0xd8/0x1e0\\n alg_test+0x634/0x890\\n cryptomgr_test+0x40/0x70\\n kthread+0x1e0/0x220\\n ret_from_fork+0x10/0x18\\n Kernel panic - not syncing: hung_task: blocked tasks\\n\\nFor padata_do_parallel, when the return err is 0 or -EBUSY, it will call\\nwait_for_completion(\u0026wait-\u003ecompletion) in test_aead_vec_cfg. In normal\\ncase, aead_request_complete() will be called in pcrypt_aead_serial and the\\nreturn err is 0 for padata_do_parallel. But, when pinst-\u003eflags is\\nPADATA_RESET, the return err is -EBUSY for padata_do_parallel, and it\\nwon\u0027t call aead_request_complete(). Therefore, test_aead_vec_cfg will\\nhung at wait_for_completion(\u0026wait-\u003ecompletion), which will cause\\nhungtask.\\n\\nThe problem comes as following:\\n(padata_do_parallel)                 |\\n    rcu_read_lock_bh();              |\\n    err = -EINVAL;                   |   (padata_replace)\\n                                     |     pinst-\u003eflags |= PADATA_RESET;\\n    err = -EBUSY                     |\\n    if (pinst-\u003eflags \u0026 PADATA_RESET) |\\n        rcu_read_unlock_bh()         |\\n        return err\\n\\nIn order to resolve the problem, we replace the return err -EBUSY with\\n-EAGAIN, which means parallel_data is changing, and the caller should call\\nit again.\\n\\nv3:\\nremove retry and just change the return err.\\nv2:\\nintroduce padata_try_do_parallel() in pcrypt_aead_encrypt and\\npcrypt_aead_decrypt to solve the hungtask.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: crypto: pcrypt - Reparar hungtask para PADATA_RESET. Encontramos un error de hungtask en test_aead_vec_cfg de la siguiente manera: INFORMACI\u00d3N: tarea cryptomgr_test:391009 bloqueada durante m\u00e1s de 120 segundos. \\\"echo 0 \u0026gt; /proc/sys/kernel/hung_task_timeout_secs\\\" desactiva este mensaje. Seguimiento de llamadas: __switch_to+0x98/0xe0 __schedule+0x6c4/0xf40 Schedule+0xd8/0x1b4 Schedule_timeout+0x474/0x560 wait_for_common+0x368/0x4e0 wait_for_completion+0x20/0x30 wait_for_completion+0x20/0x30 test_aead_ve c_cfg+0xab4/0xd50 test_aead+0x144/0x1f0 alg_test_aead+ 0xd8/0x1e0 alg_test+0x634/0x890 cryptomgr_test+0x40/0x70 kthread+0x1e0/0x220 ret_from_fork+0x10/0x18 kernel panic - no syncing: hung_task: tareas bloqueadas para el error for_completion (\u0026amp;esperar-\u0026gt;finalizaci\u00f3n) en test_aead_vec_cfg. En caso normal, se llamar\u00e1 aead_request_complete() en pcrypt_aead_serial y el error de retorno es 0 para padata_do_parallel. Pero, cuando pinst-\u0026gt;flags es PADATA_RESET, el error de retorno es -EBUSY para padata_do_parallel y no llamar\u00e1 a aead_request_complete(). Por lo tanto, test_aead_vec_cfg se colgar\u00e1 en wait_for_completion(\u0026amp;wait-\u0026gt;completion), lo que provocar\u00e1 que se cuelgue la tarea. El problema viene de la siguiente manera: (padata_do_parallel) | rcu_read_lock_bh(); | err = -EINVAL; | (padata_replace) | pinst-\u0026gt;flags |= PADATA_RESET; err = -EBUSY | si (pinst-\u0026gt;flags \u0026amp; PADATA_RESET) | rcu_read_unlock_bh() | return err Para resolver el problema, reemplazamos el retorno err -EBUSY con -EAGAIN, lo que significa que los datos_paralelos est\u00e1n cambiando y la persona que llama debe llamarlo nuevamente. v3: elimine el reintento y simplemente cambie el error de devoluci\u00f3n. v2: introduce padata_try_do_parallel() en pcrypt_aead_encrypt y pcrypt_aead_decrypt para resolver la tarea colgada.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"crypto/pcrypt.c\",\"kernel/padata.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"16295bec6398a3eedc9377e1af6ff4c71b98c300\",\"lessThan\":\"fb2d3a50a8f29a3c66682bb426144f40e32ab818\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"16295bec6398a3eedc9377e1af6ff4c71b98c300\",\"lessThan\":\"039fec48e062504f14845124a1a25eb199b2ddc0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"16295bec6398a3eedc9377e1af6ff4c71b98c300\",\"lessThan\":\"c9c1334697301c10e6918d747ed38abfbc0c96e7\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"16295bec6398a3eedc9377e1af6ff4c71b98c300\",\"lessThan\":\"e97bf4ada7dddacd184c3e196bd063b0dc71b41d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"16295bec6398a3eedc9377e1af6ff4c71b98c300\",\"lessThan\":\"546c1796ad1ed0d87dab3c4b5156d75819be2316\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"16295bec6398a3eedc9377e1af6ff4c71b98c300\",\"lessThan\":\"c55fc098fd9d2dca475b82d00ffbcaf97879d77e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"16295bec6398a3eedc9377e1af6ff4c71b98c300\",\"lessThan\":\"e134f3aba98e6c801a693f540912c2d493718ddf\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"16295bec6398a3eedc9377e1af6ff4c71b98c300\",\"lessThan\":\"372636debe852913529b1716f44addd94fff2d28\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"16295bec6398a3eedc9377e1af6ff4c71b98c300\",\"lessThan\":\"8f4f68e788c3a7a696546291258bfa5fdb215523\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"crypto/pcrypt.c\",\"kernel/padata.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2.6.34\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.34\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.14.331\",\"lessThanOrEqual\":\"4.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.300\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.262\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.202\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.140\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.64\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.5.13\",\"lessThanOrEqual\":\"6.5.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.3\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.7\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-05-23T17:18:51.048604Z\",\"id\":\"CVE-2023-52813\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.6.34\",\"versionEndExcluding\":\"4.14.331\",\"matchCriteriaId\":\"0A33B97C-82BF-41CC-9556-0FDC756CA426\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.15\",\"versionEndExcluding\":\"4.19.300\",\"matchCriteriaId\":\"C99DDB75-1CAC-40D0-A14D-67A2A55D6005\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.262\",\"matchCriteriaId\":\"28B0AAED-45BA-4928-9A85-66A429B9F038\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.202\",\"matchCriteriaId\":\"39D508B4-58C7-40C2-BE05-44E41110EB98\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.140\",\"matchCriteriaId\":\"15D6C23C-78A3-40D2-B76B-4F1D9C2D95C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.64\",\"matchCriteriaId\":\"8D7C884A-CAA2-4EA2-9FEB-5CE776D7B05F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.5.13\",\"matchCriteriaId\":\"674C4F82-C336-4B49-BF64-1DE422E889C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.6\",\"versionEndExcluding\":\"6.6.3\",\"matchCriteriaId\":\"B58252FA-A49C-411F-9B28-DC5FE44BC5A0\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/039fec48e062504f14845124a1a25eb199b2ddc0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/372636debe852913529b1716f44addd94fff2d28\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/546c1796ad1ed0d87dab3c4b5156d75819be2316\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8f4f68e788c3a7a696546291258bfa5fdb215523\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c55fc098fd9d2dca475b82d00ffbcaf97879d77e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c9c1334697301c10e6918d747ed38abfbc0c96e7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e134f3aba98e6c801a693f540912c2d493718ddf\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e97bf4ada7dddacd184c3e196bd063b0dc71b41d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fb2d3a50a8f29a3c66682bb426144f40e32ab818\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/039fec48e062504f14845124a1a25eb199b2ddc0\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/372636debe852913529b1716f44addd94fff2d28\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/546c1796ad1ed0d87dab3c4b5156d75819be2316\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8f4f68e788c3a7a696546291258bfa5fdb215523\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c55fc098fd9d2dca475b82d00ffbcaf97879d77e\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c9c1334697301c10e6918d747ed38abfbc0c96e7\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e134f3aba98e6c801a693f540912c2d493718ddf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e97bf4ada7dddacd184c3e196bd063b0dc71b41d\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fb2d3a50a8f29a3c66682bb426144f40e32ab818\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-06-28T07:45:28+00:00",
      "cve": "CVE-2023-52813",
      "id": "CVE-2023-52813",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:fixed": "709",
      "product_status:known_affected": "50",
      "product_status:known_not_affected": "30",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: crypto: pcrypt - Fix hungtask for PADATA_RESET",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-52813.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-05T17:03:21Z",
      "cve": "CVE-2023-52813",
      "id": "CVE-2023-52813",
      "initial_release_date": "2024-05-29T02:36:47Z",
      "product_status:known_affected": "788",
      "product_status:known_not_affected": "91",
      "product_status:recommended": "410",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-52813",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-52813.json",
      "version": "123"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/fb2d3a50a8f29a3c66682bb426144f40e32ab818\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/039fec48e062504f14845124a1a25eb199b2ddc0\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/c9c1334697301c10e6918d747ed38abfbc0c96e7\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/e97bf4ada7dddacd184c3e196bd063b0dc71b41d\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/546c1796ad1ed0d87dab3c4b5156d75819be2316\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/c55fc098fd9d2dca475b82d00ffbcaf97879d77e\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/e134f3aba98e6c801a693f540912c2d493718ddf\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/372636debe852913529b1716f44addd94fff2d28\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/8f4f68e788c3a7a696546291258bfa5fdb215523\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T23:11:36.058Z\"}}, {\"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-52813\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-05-23T17:18:51.048604Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-05-23T17:19:02.984Z\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"title\": \"crypto: pcrypt - Fix hungtask for PADATA_RESET\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"16295bec6398a3eedc9377e1af6ff4c71b98c300\", \"lessThan\": \"fb2d3a50a8f29a3c66682bb426144f40e32ab818\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"16295bec6398a3eedc9377e1af6ff4c71b98c300\", \"lessThan\": \"039fec48e062504f14845124a1a25eb199b2ddc0\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"16295bec6398a3eedc9377e1af6ff4c71b98c300\", \"lessThan\": \"c9c1334697301c10e6918d747ed38abfbc0c96e7\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"16295bec6398a3eedc9377e1af6ff4c71b98c300\", \"lessThan\": \"e97bf4ada7dddacd184c3e196bd063b0dc71b41d\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"16295bec6398a3eedc9377e1af6ff4c71b98c300\", \"lessThan\": \"546c1796ad1ed0d87dab3c4b5156d75819be2316\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"16295bec6398a3eedc9377e1af6ff4c71b98c300\", \"lessThan\": \"c55fc098fd9d2dca475b82d00ffbcaf97879d77e\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"16295bec6398a3eedc9377e1af6ff4c71b98c300\", \"lessThan\": \"e134f3aba98e6c801a693f540912c2d493718ddf\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"16295bec6398a3eedc9377e1af6ff4c71b98c300\", \"lessThan\": \"372636debe852913529b1716f44addd94fff2d28\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"16295bec6398a3eedc9377e1af6ff4c71b98c300\", \"lessThan\": \"8f4f68e788c3a7a696546291258bfa5fdb215523\", \"versionType\": \"git\"}], \"programFiles\": [\"crypto/pcrypt.c\", \"kernel/padata.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.6.34\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"2.6.34\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.14.331\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.14.*\"}, {\"status\": \"unaffected\", \"version\": \"4.19.300\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.262\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.202\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.140\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.64\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.5.13\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.5.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.7\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"crypto/pcrypt.c\", \"kernel/padata.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/fb2d3a50a8f29a3c66682bb426144f40e32ab818\"}, {\"url\": \"https://git.kernel.org/stable/c/039fec48e062504f14845124a1a25eb199b2ddc0\"}, {\"url\": \"https://git.kernel.org/stable/c/c9c1334697301c10e6918d747ed38abfbc0c96e7\"}, {\"url\": \"https://git.kernel.org/stable/c/e97bf4ada7dddacd184c3e196bd063b0dc71b41d\"}, {\"url\": \"https://git.kernel.org/stable/c/546c1796ad1ed0d87dab3c4b5156d75819be2316\"}, {\"url\": \"https://git.kernel.org/stable/c/c55fc098fd9d2dca475b82d00ffbcaf97879d77e\"}, {\"url\": \"https://git.kernel.org/stable/c/e134f3aba98e6c801a693f540912c2d493718ddf\"}, {\"url\": \"https://git.kernel.org/stable/c/372636debe852913529b1716f44addd94fff2d28\"}, {\"url\": \"https://git.kernel.org/stable/c/8f4f68e788c3a7a696546291258bfa5fdb215523\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\ncrypto: pcrypt - Fix hungtask for PADATA_RESET\\n\\nWe found a hungtask bug in test_aead_vec_cfg as follows:\\n\\nINFO: task cryptomgr_test:391009 blocked for more than 120 seconds.\\n\\\"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\\\" disables this message.\\nCall trace:\\n __switch_to+0x98/0xe0\\n __schedule+0x6c4/0xf40\\n schedule+0xd8/0x1b4\\n schedule_timeout+0x474/0x560\\n wait_for_common+0x368/0x4e0\\n wait_for_completion+0x20/0x30\\n wait_for_completion+0x20/0x30\\n test_aead_vec_cfg+0xab4/0xd50\\n test_aead+0x144/0x1f0\\n alg_test_aead+0xd8/0x1e0\\n alg_test+0x634/0x890\\n cryptomgr_test+0x40/0x70\\n kthread+0x1e0/0x220\\n ret_from_fork+0x10/0x18\\n Kernel panic - not syncing: hung_task: blocked tasks\\n\\nFor padata_do_parallel, when the return err is 0 or -EBUSY, it will call\\nwait_for_completion(\u0026wait-\u003ecompletion) in test_aead_vec_cfg. In normal\\ncase, aead_request_complete() will be called in pcrypt_aead_serial and the\\nreturn err is 0 for padata_do_parallel. But, when pinst-\u003eflags is\\nPADATA_RESET, the return err is -EBUSY for padata_do_parallel, and it\\nwon\u0027t call aead_request_complete(). Therefore, test_aead_vec_cfg will\\nhung at wait_for_completion(\u0026wait-\u003ecompletion), which will cause\\nhungtask.\\n\\nThe problem comes as following:\\n(padata_do_parallel)                 |\\n    rcu_read_lock_bh();              |\\n    err = -EINVAL;                   |   (padata_replace)\\n                                     |     pinst-\u003eflags |= PADATA_RESET;\\n    err = -EBUSY                     |\\n    if (pinst-\u003eflags \u0026 PADATA_RESET) |\\n        rcu_read_unlock_bh()         |\\n        return err\\n\\nIn order to resolve the problem, we replace the return err -EBUSY with\\n-EAGAIN, which means parallel_data is changing, and the caller should call\\nit again.\\n\\nv3:\\nremove retry and just change the return err.\\nv2:\\nintroduce padata_try_do_parallel() in pcrypt_aead_encrypt and\\npcrypt_aead_decrypt to solve the hungtask.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.14.331\", \"versionStartIncluding\": \"2.6.34\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.300\", \"versionStartIncluding\": \"2.6.34\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.262\", \"versionStartIncluding\": \"2.6.34\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.202\", \"versionStartIncluding\": \"2.6.34\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.140\", \"versionStartIncluding\": \"2.6.34\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.64\", \"versionStartIncluding\": \"2.6.34\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.5.13\", \"versionStartIncluding\": \"2.6.34\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.3\", \"versionStartIncluding\": \"2.6.34\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.7\", \"versionStartIncluding\": \"2.6.34\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2025-07-15T15:43:50.801Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2023-52813\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-07-15T15:43:50.801Z\", \"dateReserved\": \"2024-05-21T15:19:24.248Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-05-21T15:31:21.604Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…