PT-2025-53234 · Linux+1 · Linux Kernel+1
Published
2023-05-20
·
Updated
2026-03-14
·
CVE-2023-54157
CVSS v2.0
7.7
High
| Vector | AV:A/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.10.150-00001-gdc8dcf942daa
Description
The Linux kernel contained a use-after-free condition within the binder component. Specifically, a race condition between
munmap and binder update page range could lead to a use-after-free (UAF) when accessing alloc->vma. This occurred because a change in how mmap lock was handled after detaching a VMA in munmap allowed vm area free to proceed with only a read lock, creating a window where accesses to alloc->vma in binder update page range could race with the VMA being freed. The issue was identified through KASAN tracing, which revealed a read of freed memory in vm insert page. The fix involves reverting to taking the mmap write lock inside binder update page range to prevent the race condition.Recommendations
Upgrade to Linux kernel version 5.10.150-00001-gdc8dcf942daa or a later version that includes the fix.
Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linux Kernel