CVE-2023-54309

A race condition was found in the vTPM proxy driver. The /dev/vtpmx device becomes accessible before the workqueue is initialized, potentially causing memory corruption if accessed during the initialization window.

Exploitation requires accessing /dev/vtpmx during a narrow window at module load time. This affects virtualization environments using vTPM. The race window is very short, making reliable exploitation difficult.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.