CVE-2023-54244

A flaw was found in the Linux kernel's ACPI Embedded Controller (EC) subsystem. When removing custom query handlers, a kernel oops can occur if the handler is still being executed in the EC query workqueue while the module containing the callback function is being unloaded. The fix ensures the workqueue is flushed before handler removal.

This bug requires a race condition between module unloading and EC query handler execution, which typically involves administrative operations. Since triggering the oops depends on specific timing during module removal, the attack surface is limited to privileged local users performing driver management tasks.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.