CVE-2023-54309 — Use of Uninitialized Resource in Linux
Severity
4.7MEDIUM
No vectorEPSS
0.0%
top 89.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 30
Description
In the Linux kernel, the following vulnerability has been resolved:
tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
/dev/vtpmx is made visible before 'workqueue' is initialized, which can
lead to a memory corruption in the worst case scenario.
Address this by initializing 'workqueue' as the very first step of the
driver initialization.
Affected Packages4 packages
▶CVEListV5linux/linux6f99612e250041a2402d3b1694bccb149cd424a4 — 509d21f1c4bb9d35d397fca3226165b156a7639f+8
🔴Vulnerability Details
3GHSA▶
GHSA-gc92-cfvx-57qj: In the Linux kernel, the following vulnerability has been resolved:
tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
/dev/vtpmx is m↗2025-12-30
OSV▶
CVE-2023-54309: In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation /dev/vtpmx is mad↗2025-12-30