PT-2025-40776 · Linux+2 · Linux Kernel+2
Publicado
2024-11-12
·
Atualizado
2025-11-28
·
CVE-2023-53613
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw in the DAX (Direct Access) subsystem related to a use-after-free condition in the
dax mapping release() function. This issue occurs when removing a device-dax region provider, potentially leading to a system crash or unexpected behavior. The root cause is an attempt to free an IDA (Increment and Decrement Allocator) object that has already been freed. The fix involves ensuring that a dax mapping pins its parent dev dax instance until dax mapping release() completes, preventing the premature release of the parent object.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel
Red Hat
Suse