Race Condition in Linux Kernel TPM Proxy Leading to Potential Memory Corruption

CVE-2023-54309

What is CVE-2023-54309?

In the Linux kernel, a race condition exists within the tpm_vtpm_proxy leading to the premature exposure of /dev/vtpmx before proper initialization of the workqueue, potentially resulting in memory corruption. This issue has been addressed by ensuring that the workqueue is initialized as the very first operation during the driver setup, enhancing the stability and security of the kernel.

References