Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
CVE-2023-54173: Linux kernel may crash when BPF sends events
CVE-2023-54173 · published 10 months ago
Summary
The Linux kernel’s BPF feature could cause the system to stop working if it tries to output data while the CPU is switched to another task. This happens because the code didn’t prevent the current task from being pre‑empted, leading to two tasks sharing the same buffer and triggering a crash. Updating to the latest kernel version that disables pre‑emption during this operation fixes the problem.
What to do
- Update canonical linux-aws-5.15 to version 5.15.0-1049.54~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1051.59~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1046.54~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-88.98~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1042.45~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1045.51~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-88.98~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1019.19~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1047.53~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1045.49~20.04.1.
- Update canonical linux to version 5.15.0-88.98.
- Update canonical linux-aws to version 5.15.0-1049.54.
- Update canonical linux-azure to version 5.15.0-1051.59.
- Update canonical linux-gcp to version 5.15.0-1046.54.
- Update canonical linux-gke to version 5.15.0-1046.51.
- Update canonical linux-gkeop to version 5.15.0-1032.38.
- Update canonical linux-ibm to version 5.15.0-1042.45.
- Update canonical linux-intel-iotg to version 5.15.0-1045.51.
- Update canonical linux-kvm to version 5.15.0-1046.51.
- Update canonical linux-lowlatency to version 5.15.0-88.98.
- Update canonical linux-nvidia to version 5.15.0-1040.40.
- Update canonical linux-nvidia-tegra to version 5.15.0-1019.19.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1006.6.
- Update canonical linux-oracle to version 5.15.0-1047.53.
- Update canonical linux-raspi to version 5.15.0-1042.45.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1025.29.
- Update canonical linux-bluefield to version 5.15.0-1031.33.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1042.44.
- Update canonical linux-realtime to version 5.15.0-1050.56.
- Update debian linux to version 6.1.52-1.
- Update debian linux to version 6.4.11-1.
- Update canonical linux-azure-fde to version 5.15.0-1051.59.1.
- Update linux linux to version 3048cb0dc0cc9dc74ed93690dffef00733bcad5b or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux |
< 3048cb0dc0cc9dc74ed93690dffef00733bcad5b 5.7 |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1049.54~20.04.1 Fix: upgrade to 5.15.0-1049.54~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1051.59~20.04.1 Fix: upgrade to 5.15.0-1051.59~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1046.54~20.04.1 Fix: upgrade to 5.15.0-1046.54~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-88.98~20.04.1 Fix: upgrade to 5.15.0-88.98~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1042.45~20.04.1 Fix: upgrade to 5.15.0-1042.45~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1045.51~20.04.1 Fix: upgrade to 5.15.0-1045.51~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-88.98~20.04.1 Fix: upgrade to 5.15.0-88.98~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1019.19~20.04.1 Fix: upgrade to 5.15.0-1019.19~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1047.53~20.04.1 Fix: upgrade to 5.15.0-1047.53~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1045.49~20.04.1 Fix: upgrade to 5.15.0-1045.49~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
Showing 50 of 119. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-88.98 Fix: upgrade to 5.15.0-88.98
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1049.54 Fix: upgrade to 5.15.0-1049.54
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1051.59 Fix: upgrade to 5.15.0-1051.59
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1046.54 Fix: upgrade to 5.15.0-1046.54
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1046.51 Fix: upgrade to 5.15.0-1046.51
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1032.38 Fix: upgrade to 5.15.0-1032.38
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1042.45 Fix: upgrade to 5.15.0-1042.45
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1045.51 Fix: upgrade to 5.15.0-1045.51
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1046.51 Fix: upgrade to 5.15.0-1046.51
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-88.98 Fix: upgrade to 5.15.0-88.98
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1040.40 Fix: upgrade to 5.15.0-1040.40
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1019.19 Fix: upgrade to 5.15.0-1019.19
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1006.6 Fix: upgrade to 5.15.0-1006.6
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1047.53 Fix: upgrade to 5.15.0-1047.53
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1042.45 Fix: upgrade to 5.15.0-1042.45
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1025.29 Fix: upgrade to 5.15.0-1025.29
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1031.33 Fix: upgrade to 5.15.0-1031.33
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1042.44 Fix: upgrade to 5.15.0-1042.44
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1050.56 Fix: upgrade to 5.15.0-1050.56
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Debian:12 | debian | linux |
< 6.1.52-1 Fix: upgrade to 6.1.52-1
|
| Debian:13 | debian | linux |
< 6.4.11-1 Fix: upgrade to 6.4.11-1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1051.59.1 Fix: upgrade to 5.15.0-1051.59.1
|
Original advisory text
bpf: Disable preemption in bpf_event_output
In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpf_event_output We received report [1] of kernel crash, which is caused by using nesting protection without disabled preemption. The bpf_event_output can be called by programs executed by bpf_prog_run_array_cg function that disabled migration but keeps preemption enabled. This can cause task to be preempted by another one inside the nesting protection and lead eventually to two tasks using same perf_sample_data buffer and cause crashes like: BUG: kernel NULL pointer dereference, address: 0000000000000001 #PF: supervisor instruction fetch in kernel mode #PF: error_code(0x0010) - not-present page ... ? perf_output_sample+0x12a/0x9a0 ? finish_task_switch.isra.0+0x81/0x280 ? perf_event_output+0x66/0xa0 ? bpf_event_output+0x13a/0x190 ? bpf_event_output_data+0x22/0x40 ? bpf_prog_dfc84bbde731b257_cil_sock4_connect+0x40a/0xacb ? xa_load+0x87/0xe0 ? __cgroup_bpf_run_filter_sock_addr+0xc1/0x1a0 ? release_sock+0x3e/0x90 ? sk_setsockopt+0x1a1/0x12f0 ? udp_pre_connect+0x36/0x50 ? inet_dgram_connect+0x93/0xa0 ? __sys_connect+0xb4/0xe0 ? udp_setsockopt+0x27/0x40 ? __pfx_udp_push_pending_frames+0x10/0x10 ? __sys_setsockopt+0xdf/0x1a0 ? __x64_sys_connect+0xf/0x20 ? do_syscall_64+0x3a/0x90 ? entry_SYSCALL_64_after_hwframe+0x72/0xdc Fixing this by disabling preemption in bpf_event_output. [1] https://github.com/cilium/cilium/issues/26756
References
- https://git.kernel.org/stable/c/3048cb0dc0cc9dc74ed93690dffef00733bcad5b
- https://git.kernel.org/stable/c/063c9ce8e74e07bf94f99cd13146f42867875e8b
- https://ubuntu.com/security/CVE-2023-54173 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-54173 Third Party Advisory
- https://git.kernel.org/linus/d62cc390c2e99ae267ffe4b8d7e2e08b6c758c32 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2023-54173 Vendor Advisory
- https://git.kernel.org/stable/c/c81bdf8f9f2b002d217c3d5357cdea9f2b82ff90
- https://git.kernel.org/stable/c/36dd8ca330b76585640ed32255a3c99f901e1502
- https://git.kernel.org/stable/c/d62cc390c2e99ae267ffe4b8d7e2e08b6c758c32
Severity
6.8
Medium
Timeline
Published30 Dec 2025
Updated26 Oct 2026
First seen7 Mar 2026
Sources
CVE-2023-54173 · NVD
CVE-2023-54173 · MITRE
UBUNTU-CVE-2023-54173 · OSV
DEBIAN-CVE-2023-54173 · OSV
Track software like this
Free during beta