CVE-2023-54268: Linux

EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: debugobjects: Don't wake up kswapd from fill_pool() syzbot is reporting a lockdep warning in fill_pool() because the allocation from debugobjects is using GFP_ATOMIC, which is (__GFP_HIGH | __GFP_KSWAPD_RECLAIM) and therefore tries to wake up kswapd, which acquires kswapd_wait::lock. Since fill_pool() might be called with arbitrary locks held, fill_pool() should not assume that acquiring kswapd_wait::lock is safe. Use __GFP_HIGH instead and remove __GFP_NORETRY as it is pointless for !__GFP_DIRECT_RECLAIM allocation.

Affected products

• Linux Linux: from 2.6.26, before 5.4.244 (fixed in 5.4.244); from 5.5, before 5.10.181 (fixed in 5.10.181); from 5.11, before 5.15.114 (fixed in 5.15.114); from 5.16, before 6.1.31 (fixed in 6.1.31); from 6.2, before 6.3.5 (fixed in 6.3.5)

Published 2025-12-30. Last modified 2026-06-17.