Race Condition Vulnerability in Linux Kernel by Mellanox Technologies

CVE-2023-53581

What is CVE-2023-53581?

A race condition vulnerability in the Linux kernel allows a double-removal of flows from the unready_flows list, potentially causing system crashes. This issue arises because the NOT_READY flag is checked prior to acquiring the necessary lock, leaving the system vulnerable during concurrent operations. The solution involves repositioning the flag check within a protected mutex section to prevent unauthorized access, thus enhancing system stability. Users are advised to update their systems to mitigate potential risks associated with this vulnerability.

References