{
  "cveId": "CVE-2023-53099",
  "url": "https://patchblox.com/security/cve/CVE-2023-53099",
  "summary": "CVE-2023-53099 is fixed in linux on 1 platform, first by DEBIAN-CVE-2023-53099, released May 2, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  firmware: xilinx: don\u0027t make a sleepable memory...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  firmware: xilinx: don\u0027t make a sleepable memory allocation from an atomic context  The following issue was discovered using lockdep: [    6.691371] BUG: sleeping function called from invalid context at include/linux/sched/mm.h:209 [    6.694602] in_atomic(): 1, irqs_disabled(): 128, non_block: 0, pid: 1, name: swapper/0 [    6.702431] 2 locks held by swapper/0/1: [    6.706300]  #0: ffffff8800f6f188 (\u0026dev-\u003Emutex){....}-{3:3}, at: __device_driver_lock\u002B0x4c/0x90 [    6.714900]  #1: ffffffc009a2abb8 (enable_lock){....}-{2:2}, at: clk_enable_lock\u002B0x4c/0x140 [    6.723156] irq event stamp: 304030 [    6.726596] hardirqs last  enabled at (304029): [\u003Cffffffc008d17ee0\u003E] _raw_spin_unlock_irqrestore\u002B0xc0/0xd0 [    6.736142] hardirqs last disabled at (304030): [\u003Cffffffc00876bc5c\u003E] clk_enable_lock\u002B0xfc/0x140 [    6.744742] softirqs last  enabled at (303958): [\u003Cffffffc0080904f0\u003E] _stext\u002B0x4f0/0x894 [    6.752655] softirqs last disabled at (303951): [\u003Cffffffc0080e53b8\u003E] irq_exit\u002B0x238/0x280 [    6.760744] CPU: 1 PID: 1 Comm: swapper/0 Tainted: G     U            5.15.36 #2 [    6.768048] Hardware name: xlnx,zynqmp (DT) [    6.772179] Call trace: [    6.774584]  dump_backtrace\u002B0x0/0x300 [    6.778197]  show_stack\u002B0x18/0x30 [    6.781465]  dump_stack_lvl\u002B0xb8/0xec [    6.785077]  dump_stack\u002B0x1c/0x38 [    6.788345]  ___might_sleep\u002B0x1a8/0x2a0 [    6.792129]  __might_sleep\u002B0x6c/0xd0 [    6.795655]  kmem_cache_alloc_trace\u002B0x270/0x3d0 [    6.800127]  do_feature_check_call\u002B0x100/0x220 [    6.804513]  zynqmp_pm_invoke_fn\u002B0x8c/0xb0 [    6.808555]  zynqmp_pm_clock_getstate\u002B0x90/0xe0 [    6.813027]  zynqmp_pll_is_enabled\u002B0x8c/0x120 [    6.817327]  zynqmp_pll_enable\u002B0x38/0xc0 [    6.821197]  clk_core_enable\u002B0x144/0x400 [    6.825067]  clk_core_enable\u002B0xd4/0x400 [    6.828851]  clk_core_enable\u002B0xd4/0x400 [    6.832635]  clk_core_enable\u002B0xd4/0x400 [    6.836419]  clk_core_enable\u002B0xd4/0x400 [    6.840203]  clk_core_enable\u002B0xd4/0x400 [    6.843987]  clk_core_enable\u002B0xd4/0x400 [    6.847771]  clk_core_enable\u002B0xd4/0x400 [    6.851555]  clk_core_enable_lock\u002B0x24/0x50 [    6.855683]  clk_enable\u002B0x24/0x40 [    6.858952]  fclk_probe\u002B0x84/0xf0 [    6.862220]  platform_probe\u002B0x8c/0x110 [    6.865918]  really_probe\u002B0x110/0x5f0 [    6.869530]  __driver_probe_device\u002B0xcc/0x210 [    6.873830]  driver_probe_device\u002B0x64/0x140 [    6.877958]  __driver_attach\u002B0x114/0x1f0 [    6.881828]  bus_for_each_dev\u002B0xe8/0x160 [    6.885698]  driver_attach\u002B0x34/0x50 [    6.889224]  bus_add_driver\u002B0x228/0x300 [    6.893008]  driver_register\u002B0xc0/0x1e0 [    6.896792]  __platform_driver_register\u002B0x44/0x60 [    6.901436]  fclk_driver_init\u002B0x1c/0x28 [    6.905220]  do_one_initcall\u002B0x104/0x590 [    6.909091]  kernel_init_freeable\u002B0x254/0x2bc [    6.913390]  kernel_init\u002B0x24/0x130 [    6.916831]  ret_from_fork\u002B0x10/0x20  Fix it by passing the GFP_ATOMIC gfp flag for the corresponding memory allocation.",
  "published": "2025-05-02T16:15:28Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00153,
  "epssPercentile": 0.0444,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.25-1",
      "fix": "DEBIAN-CVE-2023-53099",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53099",
      "released": "2025-05-02T16:15:28Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.1.25-1",
      "fix": "DEBIAN-CVE-2023-53099",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53099",
      "released": "2025-05-02T16:15:28Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.1.25-1",
      "fix": "DEBIAN-CVE-2023-53099",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53099",
      "released": "2025-05-02T16:15:28Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T13:31:49Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}