CVE-2023-54173 — Incorrect Synchronization in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 92.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 30
Description
In the Linux kernel, the following vulnerability has been resolved:
bpf: Disable preemption in bpf_event_output
We received report [1] of kernel crash, which is caused by
using nesting protection without disabled preemption.
The bpf_event_output can be called by programs executed by
bpf_prog_run_array_cg function that disabled migration but
keeps preemption enabled.
This can cause task to be preempted by another one inside the
nesting protection and lead eventually to two tasks using same
pe…
Affected Packages4 packages
▶CVEListV5linux/linux2a916f2f546ca1c1e3323e2a4269307f6d9890eb — 3048cb0dc0cc9dc74ed93690dffef00733bcad5b+5
🔴Vulnerability Details
3GHSA▶
GHSA-m688-w5rr-prwm: In the Linux kernel, the following vulnerability has been resolved:
bpf: Disable preemption in bpf_event_output
We received report [1] of kernel cra↗2025-12-30
OSV▶
CVE-2023-54173: In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpf_event_output We received report [1] of kernel crash↗2025-12-30