CVE-2023-54303

A flaw was found in the Linux kernel's BPF subsystem. The bpf_perf_event_output() function relies on disabled preemption for nesting protection, but when called from uprobes context via bpf_prog_run_array_sleepable(), preemption remains enabled. This allows task preemption during protected sections, leading to buffer corruption when two tasks share the same perf_sample_data buffer, causing kernel crashes.

This issue requires BPF programs attached to uprobes that use bpf_perf_event_output(). The flaw can cause kernel crashes when specific preemption timing occurs, but exploiting it for more than denial of service would require precise control over kernel scheduling. Loading BPF programs typically requires CAP_BPF or CAP_SYS_ADMIN capabilities.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.