CVE-2023-53461

In the Linux kernel, the following vulnerability has been resolved: io_uring: wait interruptibly for request completions on exit WHen the ring exits, cleanup is done and the final cancelation and waiting on completions is done by io_ring_exit_work. That function is invoked by kworker, which doesn't take any signals. Because of that, it doesn't really matter if we wait for completions in TASK_INTERRUPTIBLE or TASK_UNINTERRUPTIBLE state. However, it does matter to the hung task detection checker! Normally we expect cancelations and completions to happen rather quickly. Some test cases, however, will exit the ring and park the owning task stopped (eg via SIGSTOP). If the owning task needs to run task_work to complete requests, then io_ring_exit_work won't make any progress until the task is runnable again. Hence io_ring_exit_work can trigger the hung task detection, which is particularly problematic if panic-on-hung-task is enabled. As the ring exit doesn't take signals to begin with, have it wait interruptibly rather than uninterruptibly. io_uring has a separate stuck-exit warning that triggers independently anyway, so we're not really missing anything by making this switch.

• https://git.kernel.org/stable/c/28e649dc9947e6525c95e32aa9a8e147925e3f56Patch
• https://git.kernel.org/stable/c/4826c59453b3b4677d6bf72814e7ababdea86949Patch
• https://git.kernel.org/stable/c/58e80cb68b057e974768792c34708c6957810486Patch
• https://git.kernel.org/stable/c/8e29835366138389bfad3b31ea06960d0a77bf77Patch
• https://git.kernel.org/stable/c/b50d6e06cca7b67a3d73ca660dda27662b76e6eaPatch

Published

Oct 1, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-53456In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-53457In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-53458In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-53459In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-5346Type confusion in V8 in Google Chrome prior to 117.0.5938.14…8.8
• CVE-2023-53460In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-53462In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-53463In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-53464In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-53465In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2023-53466In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-53467In the Linux kernel, the following vulnerability has been re…5.5