PT-2023-9430 · Linux+4 · Linux Kernel+4
Publicado
2023-01-09
·
Atualizado
2025-09-29
·
CVE-2023-52907
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a use-after-free vulnerability in the Linux kernel's NFC component, specifically in the pn533 module. This occurs when the
in urb sent from pn533 usb send frame() is completed earlier than out urb, and its callback frees the skb data used as a transfer buffer for out urb. To fix this, the kernel now waits for the completion of out urb before sending in urb. The vulnerability was found by a modified version of syzkaller. Technical details include the involvement of pn533 send async complete() and the need to separate the complete function of out urb and ack urb.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Linux Kernel
Red Os
Suse