CVE-2023-53998

A flaw was found in the Linux kernel's virtio hardware random number generator driver. A race condition exists between the writer updating entropy data and a reader accessing it, due to missing memory barriers. This could potentially result in a reader accessing stale or partially written entropy data.

This race condition affects the virtio-rng driver used in virtualized environments. While the bug could theoretically impact the quality of random data returned, the practical security impact is limited since the entropy pool has other sources of randomness. The issue does not cause crashes and primarily affects data consistency.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.