CVE-2023-54271

A flaw was found in the Linux kernel's block cgroup (blk-cgroup) component. A local attacker could exploit a race condition in the blkcg_activate_policy() function, where block group policy data (blkg_policy_data) is installed before it is fully initialized. This allows another function, ioc_weight_write(), to access uninitialized data, leading to a NULL pointer dereference and causing a system crash, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.