PT-2025-40776 · Linux+2 · Linux Kernel+2
Published
2024-11-12
·
Updated
2025-11-28
·
CVE-2023-53613
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw in the DAX (Direct Access) subsystem related to a use-after-free condition in the
dax mapping release() function. This issue occurs when removing a device-dax region provider, potentially leading to a system crash or unexpected behavior. The root cause is an attempt to free an IDA (Increment and Decrement Allocator) object that has already been freed. The fix involves ensuring that a dax mapping pins its parent dev dax instance until dax mapping release() completes, preventing the premature release of the parent object.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Red Hat
Suse