CVE-2023-54324

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the multipath target when the retrieve deps function runs concurrently with multipath message. This occurs because retrieve deps iterates through a list of open devices without holding a lock, while multipath message can add or remove devices from the list simultaneously. This can lead to memory corruption or a use-after-free condition. The issue involves calls to the dm get device and dm put device functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.