Fluid Attacks Database

Description

A race condition flaw was found in the Linux kernel's PCI Data Object Exchange (DOE) implementation. The destroy_work_on_stack() function is called after signaling completion, creating a race where the work struct can go out of scope before being destroyed. This triggers debug object warnings when CONFIG_DEBUG_OBJECTS is enabled.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 12	linux	=6.1.27-1 \|\| =6.1.37-1 \|\| =6.1.38-1 \|\| =6.1.38-2 \|\| =6.1.38-2~bpo11+1 \|\| =6.1.38-3 \|\| =6.1.38-4 \|\| =6.1.38-4~bpo11+1 \|\| =6.1.52-1 \|\| =6.1.55-1~bpo11+1 \|\| >=0 <6.1.55-1	6.1.55-1
debian 13	linux	>=0 <6.5.3-1	6.5.3-1
debian 14	linux	>=0 <6.5.3-1	6.5.3-1
rpm rhel9	kernel	<0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
rpm rhel9	kernel-rt	-	-

Aliases

1. CVE-2023-542352. NVD-2023-542353. OSV-DEBIAN-2023-542354. OSV-2023-542355. SECURITY-TRACKER-CVE-2023-54235

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.