PT-2025-54031 · Linux+1 · Linux+1

Published 2023-01-01 · Updated 2026-03-14 · CVE-2023-54202

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions linux (affected versions not specified)

Description A use-after-free condition exists in the Linux kernel’s DRM/i915 subsystem, specifically within the i915 perf add config ioctl function. A race condition can occur where userspace can predict an object ID and attempt to create and remove an oa config object concurrently. If successful, this can lead to dereferencing the object after it has been unlocked, resulting in a use-after-free. The fix involves ensuring object dereferencing is completed before unlocking the metrics lock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-54202

RHSA-2023:6583

RHSA-2023:7077

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0473-1

SUSE-SU-2026:0617-1

Affected Products

Debian

Linux

References · 1180

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54202.json · Exploit
• https://osv.dev/vulnerability/CVE-2023-54202 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0473-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-54202 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-54202 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54202 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54202 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54202 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54202 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54202 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-54202 · Vendor Advisory