PT-2023-9704 · Linux+7 · Linux Kernel+7
Zheng Wang
·
Publicado
2023-09-27
·
Atualizado
2025-09-29
·
CVE-2023-52847
CVSS v3.1
7.0
Alta
| Vetor | AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a use-after-free error in the bttv component of the Linux kernel, specifically due to a race condition between the
bttv irq timeout timer function and the bttv remove function. The timer is set up in the probe and there is no timer delete operation in the remove function, which can cause the bttv irq timeout function to still be invoked after the btv object has been freed, leading to a use-after-free bug. This bug was found through static analysis and may be a false positive.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Race Condition
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Almalinux
Astra Linux
Centos
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse