CVE-2023-54007 — Time-of-check Time-of-use (TOCTOU) Race Condition in Linux
Severity
4.7MEDIUM
No vectorEPSS
0.0%
top 89.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
vmci_host: fix a race condition in vmci_host_poll() causing GPF
During fuzzing, a general protection fault is observed in
vmci_host_poll().
general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf]
RIP: 0010:__lock_acquire+0xf3/0x5e00 kernel/locking/lockdep.c:4926
Call Trace:
lock_acquire+0x1a4/0x4a0 ker…
Affected Packages4 packages
▶CVEListV5linux/linux8bf503991f87e32ea42a7bd69b79ba084fddc5d7 — 2053e93ac15519ed1f1fe6eba79a33a4963be4a3+8
🔴Vulnerability Details
3GHSA▶
GHSA-j5xc-fjvv-7rjx: In the Linux kernel, the following vulnerability has been resolved:
vmci_host: fix a race condition in vmci_host_poll() causing GPF
During fuzzing,↗2025-12-24
OSV▶
CVE-2023-54007: In the Linux kernel, the following vulnerability has been resolved: vmci_host: fix a race condition in vmci_host_poll() causing GPF During fuzzing, a↗2025-12-24