CVE-2023-54323
kernel: cxl/pmem: Fix nvdimm registration races
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 30, 2025
Updated · June 30, 2026
Description
A race condition was found in the CXL persistent memory driver. Rapid module load/unload cycles can cause async nvdimm device registration to run after the CXL context has been torn down, resulting in a NULL pointer dereference.
Statement
This affects CXL-capable systems with persistent memory. Triggering requires rapid module insertion/removal cycles, which is not typical in production but can occur during testing or development.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-366 · Race Condition within a Thread