CVE-2023-54173

A race condition was found in the BPF event output mechanism. When preemption is enabled during bpf_event_output(), two tasks can access the same perf_sample_data buffer concurrently, leading to data corruption and kernel crashes.

Triggering this requires running BPF programs attached to cgroups that use bpf_event_output() under specific preemption timing. This primarily affects systems using Cilium or similar BPF-heavy networking stacks with high load.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.