PT-2025-41109 · Linux+2 · Linux Kernel+2
Published
2023-09-08
·
Updated
2025-11-28
·
CVE-2023-53665
CVSS v2.0
6.0
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.5.0-rc2-00121-g01e55c376936 #562
Description
The Linux kernel contained a flaw in the md (multiple device) subsystem where a use-after-free condition could occur. Specifically, the code would attempt to dereference a
mddev structure after it had been exported via export rdev(). This could lead to a general protection fault. The issue was triggered by a test case involving repeated addition and removal of devices via sysfs. The vulnerable code path involves referencing mddev->kobject through rdev->kobject, and the lack of guarantee that mddev remains valid after the last rdev is freed. The test case mdadm/tests/23rdev-lifetime was used to reproduce the issue. The call trace includes md wakeup thread and mddev unlock functions.Recommendations
Update to Linux kernel version 6.5.0-rc2-00121-g01e55c376936 #562 or a later version to address this issue.
Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Red Hat
Suse