CVE-2023-53099: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-53099 was discovered in the Linux kernel, specifically affecting the Xilinx firmware component. The vulnerability was disclosed on May 2, 2025, and involves a sleepable memory allocation being made from an atomic context, which could lead to system instability (NVD, Ubuntu).

The vulnerability occurs when a sleepable memory allocation is made from an atomic context in the Xilinx firmware component. The issue was discovered using lockdep, which detected a BUG condition where a sleeping function was called from an invalid context at include/linux/sched/mm.h:209. The problem involves two locks being held by swapper/0/1: a device mutex and an enable lock, with specific timing related to hardware interrupts (NVD).

The vulnerability could cause system instability and potential kernel crashes due to improper memory allocation in atomic contexts. This affects systems running the Linux kernel, particularly those using Xilinx firmware components (Ubuntu).

The issue has been fixed by modifying the code to pass the GFP_ATOMIC gfp flag for the corresponding memory allocation. Several Linux distributions have released patches, including Ubuntu which has fixed the vulnerability in version 5.15.0-79.86 for 22.04 LTS and other affected versions (Ubuntu).