PT-2023-9551 · Linux+5 · Linux Kernel+5
Zheng Wang
·
Publicado
2023-11-23
·
Atualizado
2025-09-29
·
CVE-2023-52491
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a use-after-free bug in the Linux kernel's mtk-jpeg component, specifically due to error path handling in
mtk jpeg dec device run. This bug can be triggered in two ways: by removing the module, which calls mtk jpeg remove for cleanup, or by closing the file descriptor, which calls mtk jpeg release. The bug causes a use-after-free condition because the mtk jpeg job timeout work function is started while the job is marked as finished by invoking v4l2 m2m job finish. The fix involves starting the timeout worker only if the jpegdec worker is started successfully, ensuring that v4l2 m2m job finish is only called in either mtk jpeg job timeout work or mtk jpeg dec device run.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu