PT-2025-53999 · Linux · Linux Kernel
Published
2023-07-17
·
Updated
2026-03-24
·
CVE-2023-54170
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.3.18-150300.59.90-default #1 SLE15-SP3
Description
A flaw exists in the Linux kernel related to key management. Specifically, the issue involves linking a duplicate key to a keyring’s assoc array during DNS queries. This can occur when multiple tasks concurrently make DNS queries for the same hostname, potentially leading to a duplicate index key being created in the keyring’s assoc array. This condition ultimately results in a kernel crash, as identified by a BUG ON() check within the assoc array implementation. The issue arises from the interaction between functions such as
dns query(), request key and link(), construct alloc key(), and key link begin().Recommendations
Update the Linux kernel to version 5.3.18-150300.59.90-default #1 SLE15-SP3 or a later version that includes the fix.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel