Data Race Vulnerability in Linux Kernel Affecting Network Functionality

CVE-2023-53345

What is CVE-2023-53345?

A data race vulnerability was discovered in the RXRPC implementation of the Linux Kernel. The issue arose within the function 'rxrpc_wait_to_be_connected()', where call state checks were improperly managed. The code accessed 'call->error' without verifying that the call was completed, potentially leading to unexpected behavior during operations. This flaw emphasizes the importance of ensuring state checks before accessing shared variables to maintain network stability and integrity.

References