CVE-2023-54309
published 2025-12-30CVE-2023-54309: In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation /dev/vtpmx is made visible…
PriorityP421low4.7
EPSS
0.18%
8.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
/dev/vtpmx is made visible before 'workqueue' is initialized, which can
lead to a memory corruption in the worst case scenario.
Address this by initializing 'workqueue' as the very first step of the
driver initialization.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.52-1 (bookworm) | linux 6.1.52-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 6f99612e250041a2402d3b1694bccb149cd424a4 < 509d21f1c4bb9d35d397fca3226165b156a7639f | 509d21f1c4bb9d35d397fca3226165b156a7639f |
| linux | linux | >= 6f99612e250041a2402d3b1694bccb149cd424a4 < 04e8697d26613ccea760cf57eb20a5a27f788c0f | 04e8697d26613ccea760cf57eb20a5a27f788c0f |
| linux | linux | >= 6f99612e250041a2402d3b1694bccb149cd424a4 < 86b9820395f226b8f33cbae9599deebf8af1ce72 | 86b9820395f226b8f33cbae9599deebf8af1ce72 |
| linux | linux | >= 6f99612e250041a2402d3b1694bccb149cd424a4 < 9ff7fcb3a2ed0e9b895bb5b4c13872d584a8815b | 9ff7fcb3a2ed0e9b895bb5b4c13872d584a8815b |
| linux | linux | >= 6f99612e250041a2402d3b1694bccb149cd424a4 < e08295290c53a3cf174c236721747a01b9550ae2 | e08295290c53a3cf174c236721747a01b9550ae2 |
| linux | linux | >= 6f99612e250041a2402d3b1694bccb149cd424a4 < 99b998fb9d7d2d2d9dbb3e19db2d0ade02f5a604 | 99b998fb9d7d2d2d9dbb3e19db2d0ade02f5a604 |
| linux | linux | >= 6f99612e250041a2402d3b1694bccb149cd424a4 < 092db954e2c3c5ba6c0ce990c7da72cf8f3b9c51 | 092db954e2c3c5ba6c0ce990c7da72cf8f3b9c51 |
| linux | linux | >= 6f99612e250041a2402d3b1694bccb149cd424a4 < f4032d615f90970d6c3ac1d9c0bce3351eb4445c | f4032d615f90970d6c3ac1d9c0bce3351eb4445c |
| linux | linux_kernel | >= 0 < 5.10.191-1 | 5.10.191-1 |
| linux | linux_kernel | >= 0 < 6.1.52-1 | 6.1.52-1 |
| linux | linux_kernel | >= 0 < 6.4.11-1 | 6.4.11-1 |
| linux | linux_kernel | >= 0 < 6.4.11-1 | 6.4.11-1 |
| linux | linux_kernel | >= 4.15.0 < 4.19.291 | 4.19.291 |
| linux | linux_kernel | >= 4.20.0 < 5.4.251 | 5.4.251 |
| linux | linux_kernel | >= 4.8.0 < 4.14.322 | 4.14.322 |
| linux | linux_kernel | >= 5.11.0 < 5.15.121 | 5.15.121 |
| linux | linux_kernel | >= 5.16.0 < 6.1.40 | 6.1.40 |
| linux | linux_kernel | >= 5.5.0 < 5.10.188 | 5.10.188 |
| linux | linux_kernel | >= 6.2.0 < 6.4.5 | 6.4.5 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
vendor_redhat·2025-12-30·CVSS 4.7
CVE-2023-54309 [LOW] CWE-908 kernel: tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
kernel: tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
In the Linux kernel, the following vulnerability has been resolved:
tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
/dev/vtpmx is made visible before 'workqueue' is initialized, which can
lead to a memory corruption in the worst case scenario.
Address this by initializing 'workqueue' as the very first step of the
driver initialization.
A race condition was found in the vTPM proxy driver. The /dev/vtpmx device becomes accessible before the workqueue is initialized, potentially causing memory corruption if accessed during the initialization window.
Statement: Exploitation requires accessing /dev/vtpmx during a narrow window at module load time. This affects virtualization environments using vTPM. The
Debian
CVE-2023-54309: linux - In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_vt...
vendor_debian·2023
CVE-2023-54309 CVE-2023-54309: linux - In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_vt...
In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation /dev/vtpmx is made visible before 'workqueue' is initialized, which can lead to a memory corruption in the worst case scenario. Address this by initializing 'workqueue' as the very first step of the driver initialization.
Scope: local
bookworm: resolved (fixed in 6.1.52-1)
bullseye: resolved (fixed in 5.10.191-1)
forky: resolved (fixed in 6.4.11-1)
sid: resolved (fixed in 6.4.11-1)
trixie: resolved (fixed in 6.4.11-1)
GHSA
GHSA-gc92-cfvx-57qj: In the Linux kernel, the following vulnerability has been resolved:
tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
/dev/vtpmx is m
ghsa_unreviewed·2025-12-30
CVE-2023-54309 GHSA-gc92-cfvx-57qj: In the Linux kernel, the following vulnerability has been resolved:
tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
/dev/vtpmx is m
In the Linux kernel, the following vulnerability has been resolved:
tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
/dev/vtpmx is made visible before 'workqueue' is initialized, which can
lead to a memory corruption in the worst case scenario.
Address this by initializing 'workqueue' as the very first step of the
driver initialization.
OSV
tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
osv·2025-12-30
CVE-2023-54309 tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
In the Linux kernel, the following vulnerability has been resolved:
tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
/dev/vtpmx is made visible before 'workqueue' is initialized, which can
lead to a memory corruption in the worst case scenario.
Address this by initializing 'workqueue' as the very first step of the
driver initialization.
OSV
CVE-2023-54309: In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation /dev/vtpmx is mad
osv·2025-12-30
CVE-2023-54309 CVE-2023-54309: In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation /dev/vtpmx is mad
In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation /dev/vtpmx is made visible before 'workqueue' is initialized, which can lead to a memory corruption in the worst case scenario. Address this by initializing 'workqueue' as the very first step of the driver initialization.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2023-54309 kernel: tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
bugzilla·2025-12-30
CVE-2023-54309 [LOW] CVE-2023-54309 kernel: tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
CVE-2023-54309 kernel: tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
In the Linux kernel, the following vulnerability has been resolved:
tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
/dev/vtpmx is made visible before 'workqueue' is initialized, which can
lead to a memory corruption in the worst case scenario.
Address this by initializing 'workqueue' as the very first step of the
driver initialization.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025123035-CVE-2023-54309-4435@gregkh/T
Wiz
CVE-2023-54309 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2023-54309 CVE-2023-54309 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2023-54309 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
/dev/vtpmx is made visible before 'workqueue' is initialized, which can
lead to a memory corruption in the worst case scenario.
Address this by initializing 'workqueue' as the very first step of the
driver initialization.
Source : NVD
Published December 30, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 10.8
Exploitation Probability (EPSS) N/A
Affected packages and libraries
linux-lowlatency
kernel-zfcpdump-modules-
https://git.kernel.org/stable/c/04e8697d26613ccea760cf57eb20a5a27f788c0fhttps://git.kernel.org/stable/c/092db954e2c3c5ba6c0ce990c7da72cf8f3b9c51https://git.kernel.org/stable/c/509d21f1c4bb9d35d397fca3226165b156a7639fhttps://git.kernel.org/stable/c/86b9820395f226b8f33cbae9599deebf8af1ce72https://git.kernel.org/stable/c/99b998fb9d7d2d2d9dbb3e19db2d0ade02f5a604https://git.kernel.org/stable/c/9ff7fcb3a2ed0e9b895bb5b4c13872d584a8815bhttps://git.kernel.org/stable/c/e08295290c53a3cf174c236721747a01b9550ae2https://git.kernel.org/stable/c/f4032d615f90970d6c3ac1d9c0bce3351eb4445c
2025-12-30
Published