CVE-2023-53003

Description

In the Linux kernel, the following vulnerability has been resolved: EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info The memory for llcc_driv_data is allocated by the LLCC driver. But when it is passed as the private driver info to the EDAC core, it will get freed during the qcom_edac driver release. So when the qcom_edac driver gets probed again, it will try to use the freed data leading to the use-after-free bug. Hence, do not pass llcc_driv_data as pvt_info but rather reference it using the platform_data pointer in the qcom_edac driver.

Reserved 2025-03-27 | Published 2025-03-27 | Updated 2025-05-04 | Assigner Linux

Product status

Default status
unaffected

27450653f1db0b9d5b5048a246c850c52ee4aa61 before 66e10d5f399629ef7877304d9ba2b35d0474e7eb
affected

27450653f1db0b9d5b5048a246c850c52ee4aa61 before 76d9ebb7f0bc10fbc78b6d576751552edf743968
affected

27450653f1db0b9d5b5048a246c850c52ee4aa61 before bff5243bd32661cf9ce66f6d9210fc8f89bda145
affected

27450653f1db0b9d5b5048a246c850c52ee4aa61 before 6f0351d0c311951b8b3064db91e61841e85b2b96
affected

27450653f1db0b9d5b5048a246c850c52ee4aa61 before 977c6ba624f24ae20cf0faee871257a39348d4a9
affected

Default status
affected

4.20
affected

Any version before 4.20
unaffected

5.4.231
unaffected

5.10.166
unaffected

5.15.91
unaffected

6.1.9
unaffected

6.2
unaffected

References

git.kernel.org/...c/66e10d5f399629ef7877304d9ba2b35d0474e7eb

git.kernel.org/...c/76d9ebb7f0bc10fbc78b6d576751552edf743968

git.kernel.org/...c/bff5243bd32661cf9ce66f6d9210fc8f89bda145

git.kernel.org/...c/6f0351d0c311951b8b3064db91e61841e85b2b96

git.kernel.org/...c/977c6ba624f24ae20cf0faee871257a39348d4a9

cve.org (CVE-2023-53003)

nvd.nist.gov (CVE-2023-53003)

Download JSON