{"answers":{"affected":"","exploited":"There is no known exploitation of CVE-2023-53859 in the wild and no public exploit code.","fix":"Apply the vendor's patch.","what":"CVE-2023-53859 is a vulnerability in Linux, published on 9 Dec 2025."},"fix_prompt":"Check this codebase for CVE-2023-53859 and fix it if it is affected.\n\nWhat it is: CVE-2023-53859 is a vulnerability in Linux, published on 9 Dec 2025. \nExploitation: There is no known exploitation of CVE-2023-53859 in the wild and no public exploit code.\n\nAffected product: Linux. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2023-53859/ (Markdown: https://insights.sbomify.com/CVE-2023-53859/index.md)","id":"CVE-2023-53859","markdown":"https://insights.sbomify.com/CVE-2023-53859/index.md","name":"CVE-2023-53859","record":{"aliases":["BELL-CVE-2023-53859","DEBIAN-CVE-2023-53859","GHSA-vr4h-f46q-wpgf","ROOT-OS-DEBIAN-11-CVE-2023-53859","UBUNTU-CVE-2023-53859"],"analysis":{"component_type":"kernel","fix_type":"patch","impacts":["denial_of_service"],"network_reachable":"unknown","non_default_config":false,"product_category":"Linux kernel","requires_auth":"none","summary":"A missing noinstr annotation in the s390 architecture's idle function causes kernel warnings and potential instability during CPU idle states.","user_interaction":"not_required","vuln_class":"other"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"Linux","cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/idle: mark arch_cpu_idle() noinstr\n\nlinux-next commit (\"cpuidle: tracing: Warn about !rcu_is_watching()\")\nadds a new warning which hits on s390's arch_cpu_idle() function:\n\nRCU not on for: arch_cpu_idle+0x0/0x28\nWARNING: CPU: 2 PID: 0 at include/linux/trace_recursion.h:162 arch_ftrace_ops_list_func+0x24c/0x258\nModules linked in:\nCPU: 2 PID: 0 Comm: swapper/2 Not tainted 6.2.0-rc6-next-20230202 #4\nHardware name: IBM 8561 T01 703 (z/VM 7.3.0)\nKrnl PSW : 0404d00180000000 00000000002b55c0 (arch_ftrace_ops_list_func+0x250/0x258)\n           R:0 T:1 IO:0 EX:0 Key:0 M:1 W:0 P:0 AS:3 CC:1 PM:0 RI:0 EA:3\nKrnl GPRS: c0000000ffffbfff 0000000080000002 0000000000000026 0000000000000000\n           0000037ffffe3a28 0000037ffffe3a20 0000000000000000 0000000000000000\n           0000000000000000 0000000000f4acf6 00000000001044f0 0000037ffffe3cb0\n           0000000000000000 0000000000000000 00000000002b55bc 0000037ffffe3bb8\nKrnl Code: 00000000002b55b0: c02000840051        larl    %r2,0000000001335652\n           00000000002b55b6: c0e5fff512d1        brasl   %r14,0000000000157b58\n          #00000000002b55bc: af000000            mc      0,0\n          \u003e00000000002b55c0: a7f4ffe7            brc     15,00000000002b558e\n           00000000002b55c4: 0707                bcr     0,%r7\n           00000000002b55c6: 0707                bcr     0,%r7\n           00000000002b55c8: eb6ff0480024        stmg    %r6,%r15,72(%r15)\n           00000000002b55ce: b90400ef            lgr     %r14,%r15\nCall Trace:\n [\u003c00000000002b55c0\u003e] arch_ftrace_ops_list_func+0x250/0x258\n([\u003c00000000002b55bc\u003e] arch_ftrace_ops_list_func+0x24c/0x258)\n [\u003c0000000000f5f0fc\u003e] ftrace_common+0x1c/0x20\n [\u003c00000000001044f6\u003e] arch_cpu_idle+0x6/0x28\n [\u003c0000000000f4acf6\u003e] default_idle_call+0x76/0x128\n [\u003c00000000001cc374\u003e] do_idle+0xf4/0x1b0\n [\u003c00000000001cc6ce\u003e] cpu_startup_entry+0x36/0x40\n [\u003c0000000000119d00\u003e] smp_start_secondary+0x140/0x150\n [\u003c0000000000f5d2ae\u003e] restart_int_handler+0x6e/0x90\n\nMark arch_cpu_idle() noinstr like all other architectures with\nCONFIG_ARCH_WANTS_NO_INSTR (should) have it to fix this.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"s390/idle: mark arch_cpu_idle() noinstr","id":"CVE-2023-53859","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"other","year":"2023"},"n_packages":0,"n_references":4,"next":{"headline":"dm: don't attempt to queue IO under RCU protection","id":"CVE-2023-53860"},"packages":[],"prev":{"headline":"tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error","id":"CVE-2023-53858"},"products":["Linux"],"published":"2025-12-09","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":"PUBLISHED","updated":"2026-05-23","vendors":["Linux"]},"summary":"A missing noinstr annotation in the s390 architecture's idle function causes kernel warnings and potential instability during CPU idle states.","url":"https://insights.sbomify.com/CVE-2023-53859/"}