Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-54309

tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation /dev/vtpmx is made visible before 'workqueue' is initialized, which can lead to a memory corruption in the worst case scenario. Address this by initializing 'workqueue' as the very first step of the driver initialization.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6f99612e250041a2402d3b1694bccb149cd424a4 to < 509d21f1c4bb9d35d397fca3226165b156a7639faffected
  • 6f99612e250041a2402d3b1694bccb149cd424a4 to < 04e8697d26613ccea760cf57eb20a5a27f788c0faffected
  • 6f99612e250041a2402d3b1694bccb149cd424a4 to < 86b9820395f226b8f33cbae9599deebf8af1ce72affected
  • 6f99612e250041a2402d3b1694bccb149cd424a4 to < 9ff7fcb3a2ed0e9b895bb5b4c13872d584a8815baffected
  • 6f99612e250041a2402d3b1694bccb149cd424a4 to < e08295290c53a3cf174c236721747a01b9550ae2affected
  • 6f99612e250041a2402d3b1694bccb149cd424a4 to < 99b998fb9d7d2d2d9dbb3e19db2d0ade02f5a604affected
  • 6f99612e250041a2402d3b1694bccb149cd424a4 to < 092db954e2c3c5ba6c0ce990c7da72cf8f3b9c51affected
  • 6f99612e250041a2402d3b1694bccb149cd424a4 to < f4032d615f90970d6c3ac1d9c0bce3351eb4445caffected

Linux Linux

Default version status: affected

  • 4.8affected
  • 0 to < 4.8unaffected
  • 4.14.322 to ≤ 4.14.*unaffected
  • 4.19.291 to ≤ 4.19.*unaffected
  • 5.4.251 to ≤ 5.4.*unaffected
  • 5.10.188 to ≤ 5.10.*unaffected
  • 5.15.121 to ≤ 5.15.*unaffected
  • 6.1.40 to ≤ 6.1.*unaffected
  • 6.4.5 to ≤ 6.4.*unaffected
  • 6.5 to ≤ *unaffected

References