{"id":"CVE-2023-54246","state":"PUBLISHED","title":"rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nrcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle()\n\nThe rcuscale.holdoff module parameter can be used to delay the start\nof rcu_scale_writer() kthread.  However, the hung-task timeout will\ntrigger when the timeout specified by rcuscale.holdoff is greater than\nhung_task_timeout_secs:\n\nrunqemu kvm nographic slirp qemuparams=\"-smp 4 -m 2048M\"\nbootparams=\"rcuscale.shutdown=0 rcuscale.holdoff=300\"\n\n[  247.071753] INFO: task rcu_scale_write:59 blocked for more than 122 seconds.\n[  247.072529]       Not tainted 6.4.0-rc1-00134-gb9ed6de8d4ff #7\n[  247.073400] \"echo 0 > /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n[  247.074331] task:rcu_scale_write state:D stack:30144 pid:59    ppid:2      flags:0x00004000\n[  247.075346] Call Trace:\n[  247.075660]  <TASK>\n[  247.075965]  __schedule+0x635/0x1280\n[  247.076448]  ? __pfx___schedule+0x10/0x10\n[  247.076967]  ? schedule_timeout+0x2dc/0x4d0\n[  247.077471]  ? __pfx_lock_release+0x10/0x10\n[  247.078018]  ? enqueue_timer+0xe2/0x220\n[  247.078522]  schedule+0x84/0x120\n[  247.078957]  schedule_timeout+0x2e1/0x4d0\n[  247.079447]  ? __pfx_schedule_timeout+0x10/0x10\n[  247.080032]  ? __pfx_rcu_scale_writer+0x10/0x10\n[  247.080591]  ? __pfx_process_timeout+0x10/0x10\n[  247.081163]  ? __pfx_sched_set_fifo_low+0x10/0x10\n[  247.081760]  ? __pfx_rcu_scale_writer+0x10/0x10\n[  247.082287]  rcu_scale_writer+0x6b1/0x7f0\n[  247.082773]  ? mark_held_locks+0x29/0xa0\n[  247.083252]  ? __pfx_rcu_scale_writer+0x10/0x10\n[  247.083865]  ? __pfx_rcu_scale_writer+0x10/0x10\n[  247.084412]  kthread+0x179/0x1c0\n[  247.084759]  ? __pfx_kthread+0x10/0x10\n[  247.085098]  ret_from_fork+0x2c/0x50\n[  247.085433]  </TASK>\n\nThis commit therefore replaces schedule_timeout_uninterruptible() with\nschedule_timeout_idle().","publishedAt":"2025-12-30T12:15:44.729Z","updatedAt":"2026-05-11T19:58:17.052Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"df37e66bfdbb57e8cae7dbf39a0c66b1b8701338","status":"affected","lessThan":"55887adc76e19aec9763186e2c1d0a3481d20e96","versionType":"git"},{"version":"df37e66bfdbb57e8cae7dbf39a0c66b1b8701338","status":"affected","lessThan":"4f03fba096bfded90e0d71eba8839a46922164d1","versionType":"git"},{"version":"df37e66bfdbb57e8cae7dbf39a0c66b1b8701338","status":"affected","lessThan":"83ed0cdb6ae0383dd14b02375c353773836884ed","versionType":"git"},{"version":"df37e66bfdbb57e8cae7dbf39a0c66b1b8701338","status":"affected","lessThan":"9416dccb31fdb190d25d57e97674f232651f6560","versionType":"git"},{"version":"df37e66bfdbb57e8cae7dbf39a0c66b1b8701338","status":"affected","lessThan":"e60c122a1614b4f65b29a7bef9d83b9fd30e937a","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["kernel/rcu/rcuscale.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.7","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.7","versionType":"semver"},{"version":"5.10.197","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.133","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.55","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.5.5","status":"unaffected","lessThanOrEqual":"6.5.*","versionType":"semver"},{"version":"6.6","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["kernel/rcu/rcuscale.c"]}],"references":["https://git.kernel.org/stable/c/55887adc76e19aec9763186e2c1d0a3481d20e96","https://git.kernel.org/stable/c/4f03fba096bfded90e0d71eba8839a46922164d1","https://git.kernel.org/stable/c/83ed0cdb6ae0383dd14b02375c353773836884ed","https://git.kernel.org/stable/c/9416dccb31fdb190d25d57e97674f232651f6560","https://git.kernel.org/stable/c/e60c122a1614b4f65b29a7bef9d83b9fd30e937a"],"weaknesses":[],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/54xxx/CVE-2023-54246.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-54246","state":"PUBLISHED","datePublished":"2025-12-30T12:15:44.729Z","dateUpdated":"2026-05-11T19:58:17.052Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-12-30T12:06:44.513Z"},"containers":{"cna":{"title":"rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nrcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle()\n\nThe rcuscale.holdoff module parameter can be used to delay the start\nof rcu_scale_writer() kthread.  However, the hung-task timeout will\ntrigger when the timeout specified by rcuscale.holdoff is greater than\nhung_task_timeout_secs:\n\nrunqemu kvm nographic slirp qemuparams=\"-smp 4 -m 2048M\"\nbootparams=\"rcuscale.shutdown=0 rcuscale.holdoff=300\"\n\n[  247.071753] INFO: task rcu_scale_write:59 blocked for more than 122 seconds.\n[  247.072529]       Not tainted 6.4.0-rc1-00134-gb9ed6de8d4ff #7\n[  247.073400] \"echo 0 > /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n[  247.074331] task:rcu_scale_write state:D stack:30144 pid:59    ppid:2      flags:0x00004000\n[  247.075346] Call Trace:\n[  247.075660]  <TASK>\n[  247.075965]  __schedule+0x635/0x1280\n[  247.076448]  ? __pfx___schedule+0x10/0x10\n[  247.076967]  ? schedule_timeout+0x2dc/0x4d0\n[  247.077471]  ? __pfx_lock_release+0x10/0x10\n[  247.078018]  ? enqueue_timer+0xe2/0x220\n[  247.078522]  schedule+0x84/0x120\n[  247.078957]  schedule_timeout+0x2e1/0x4d0\n[  247.079447]  ? __pfx_schedule_timeout+0x10/0x10\n[  247.080032]  ? __pfx_rcu_scale_writer+0x10/0x10\n[  247.080591]  ? __pfx_process_timeout+0x10/0x10\n[  247.081163]  ? __pfx_sched_set_fifo_low+0x10/0x10\n[  247.081760]  ? __pfx_rcu_scale_writer+0x10/0x10\n[  247.082287]  rcu_scale_writer+0x6b1/0x7f0\n[  247.082773]  ? mark_held_locks+0x29/0xa0\n[  247.083252]  ? __pfx_rcu_scale_writer+0x10/0x10\n[  247.083865]  ? __pfx_rcu_scale_writer+0x10/0x10\n[  247.084412]  kthread+0x179/0x1c0\n[  247.084759]  ? __pfx_kthread+0x10/0x10\n[  247.085098]  ret_from_fork+0x2c/0x50\n[  247.085433]  </TASK>\n\nThis commit therefore replaces schedule_timeout_uninterruptible() with\nschedule_timeout_idle()."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"df37e66bfdbb57e8cae7dbf39a0c66b1b8701338","status":"affected","lessThan":"55887adc76e19aec9763186e2c1d0a3481d20e96","versionType":"git"},{"version":"df37e66bfdbb57e8cae7dbf39a0c66b1b8701338","status":"affected","lessThan":"4f03fba096bfded90e0d71eba8839a46922164d1","versionType":"git"},{"version":"df37e66bfdbb57e8cae7dbf39a0c66b1b8701338","status":"affected","lessThan":"83ed0cdb6ae0383dd14b02375c353773836884ed","versionType":"git"},{"version":"df37e66bfdbb57e8cae7dbf39a0c66b1b8701338","status":"affected","lessThan":"9416dccb31fdb190d25d57e97674f232651f6560","versionType":"git"},{"version":"df37e66bfdbb57e8cae7dbf39a0c66b1b8701338","status":"affected","lessThan":"e60c122a1614b4f65b29a7bef9d83b9fd30e937a","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["kernel/rcu/rcuscale.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.7","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.7","versionType":"semver"},{"version":"5.10.197","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.133","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.55","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.5.5","status":"unaffected","lessThanOrEqual":"6.5.*","versionType":"semver"},{"version":"6.6","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["kernel/rcu/rcuscale.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/55887adc76e19aec9763186e2c1d0a3481d20e96"},{"url":"https://git.kernel.org/stable/c/4f03fba096bfded90e0d71eba8839a46922164d1"},{"url":"https://git.kernel.org/stable/c/83ed0cdb6ae0383dd14b02375c353773836884ed"},{"url":"https://git.kernel.org/stable/c/9416dccb31fdb190d25d57e97674f232651f6560"},{"url":"https://git.kernel.org/stable/c/e60c122a1614b4f65b29a7bef9d83b9fd30e937a"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T19:58:17.052Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.7","versionEndExcluding":"5.10.197"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.7","versionEndExcluding":"5.15.133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.7","versionEndExcluding":"6.1.55"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.7","versionEndExcluding":"6.5.5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.7","versionEndExcluding":"6.6"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}