PT-2023-9370 · Linux+4 · Linux Kernel+4
Duoming Zhou
·
Published
2023-09-09
·
Updated
2026-03-14
·
CVE-2023-52629
CVSS v3.1
8.4
High
| Vector | AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.5.3
Description
The issue is related to a use-after-free bug in the Linux kernel. This bug occurs because the original code puts
flush work() before timer shutdown sync() in switch drv remove(), allowing the worker to be rescheduled in switch timer() and causing a use-after-free bug. The vulnerability can be exploited to access confidential data, disrupt data integrity, and cause a denial of service.Recommendations
To resolve the issue, upgrade the Linux kernel to a version newer than 6.5.3. As a temporary workaround, consider disabling the
switch drv remove() function until a patch is available. Restrict access to the vulnerable switch timer() and switch work handler() functions to minimize the risk of exploitation. Avoid using the psw->state variable in the affected code until the issue is resolved.Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Ubuntu