PT-2025-40699 · Linux+1 · Linux Kernel+1
Published
2023-06-27
·
Updated
2025-12-04
·
CVE-2023-53557
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains an issue related to the handling of fprobes and rethooks during unregistration. Specifically, the
rethook may not be released correctly after the ftrace ops is unregistered, potentially leading to a general protection fault when running bpf selftests. The issue occurs because the rethook free call is executed before fp->ops is unregistered with unregister ftrace function. This can result in other CPUs still using the rehook while it is being freed. The fprobe handler function is involved in this process.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Suse