CVE Database›Document archive›CVE-2023-54323

CVE-2023-54323

kernel: cxl/pmem: Fix nvdimm registration races

Loading…

Severity

Low

Red Hat Product Security

4.7

CVSS 3.1

Review impact separately from score.

Published · December 30, 2025

Updated · June 30, 2026

Description

A race condition was found in the CXL persistent memory driver. Rapid module load/unload cycles can cause async nvdimm device registration to run after the CXL context has been torn down, resulting in a NULL pointer dereference.

Statement

This affects CXL-capable systems with persistent memory. Triggering requires rapid module insertion/removal cycles, which is not typical in production but can occur during testing or development.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-366 · Race Condition within a Thread