PT-2025-54169 · Linux+1 · Linux Kernel+1
Published
2025-12-30
·
Updated
2026-04-20
·
CVE-2023-54323
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A race condition exists in the CXL/PMEM subsystem during NVMe DIMM (NVDIMM) registration. Specifically, the issue occurs when the lower half of asynchronous NVDIMM device registration runs after the CXL context needed by the
cxl pmem ctl() function has been torn down. This can lead to a kernel NULL pointer dereference, potentially causing a system crash. The vulnerability is triggered by repeatedly loading and unloading the cxl pci module. The cxl internal send cmd() function is involved in the crash signature. The issue is related to asynchronous registration paths in CXL, and providing a synchronous registration path can prevent the scenario.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Cxl Pci