Race Condition Vulnerability in Linux Kernel Affecting PCI Endpoint Test

CVE-2023-54326

What is CVE-2023-54326?

A vulnerability exists in the Linux kernel's PCI endpoint test, where freeing IRQs after the device has been removed creates a race condition. This flaw may allow interrupt requests (IRQs) to be processed with potentially invalid memory that has already been deallocated, leading to access violation and possible system instability. To mitigate the risk, it is crucial to free the device IRQs before the device removal occurs.

References