CVE-2023-54283

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contained a data-race condition when accessing node->ref within the bpf lru list functionality. Kernel Concurrency Sanitizer (KCSAN) identified this issue during operations like bpf lru list rotate and htab lru percpu map update elem. The vulnerability involved concurrent read and write access to the node->ref variable, potentially leading to inconsistencies. The fix involves using READ ONCE() and WRITE ONCE() patterns to ensure atomic access and adds bpf lru node clear ref() to properly clear the reference count.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.