CVE-2023-54170

A race condition was found in the Linux kernel's keyring subsystem. When concurrent DNS queries resolve the same hostname, a duplicate index key can be created in the keyring's assoc_array. The assoc_array implementation has a BUG_ON() check that detects this invalid state, causing a kernel crash. This is particularly triggered during CIFS server name resolution.

This flaw can occur during normal system operation when multiple concurrent DNS resolutions happen for the same hostname. Systems using CIFS/SMB mounts with hostname-based server specifications are more susceptible. The race window is small but the impact is a kernel crash when triggered.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.