Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Wangjinchao

Researcher fromxfusion.com
#33640of 53,632
7.8Total CVSS
Vulnerabilities · 1
PT-2023-9701
7.8
2023-10-27
Linux · Linux Kernel · CVE-2023-52854
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a Use-After-Free (UAF) problem in the Linux kernel's padata component. In a high-load arm64 environment, the pcrypt aead01 test in LTP can lead to system UAF issues. This occurs because `local bh enable()` in padata takes longer to execute than usual due to high system load and accumulated unexecuted softirq, resulting in `pd` being released by `padata free shell()` before accessing `pd->refcnt`. The fix involves adding `refcount dec and test` before calling `padata free pd` in `padata free shell()`. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.