CVE-2023-52503

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix use-after-free vulnerability in amdtee_close_session There is a potential race condition in amdtee_close_session that may cause use-after-free in amdtee_open_session. For instance, if a session has refcount == 1, and one thread tries to free this session via: kref_put(&sess->refcount, destroy_session); the reference count will get decremented, and the next step would be to call destroy_session(). However, if in another thread, amdtee_open_session() is called before destroy_session() has completed execution,...

Affected product and versions

Product

Linux Linux, linux kernel

Affected versions

>= 757cc3e9ff1d72d014096399d6e2bf03974d9da1 < da7ce52a2f6c468946195b116615297d3d113a27, >= 757cc3e9ff1d72d014096399d6e2bf03974d9da1 < 1680c82929bc14d706065f123dab77f2f1293116, >= 757cc3e9ff1d72d014096399d6e2bf03974d9da1 < 60c3e7a00db954947c265b55099c21b216f2a05c, >= 757cc3e9ff1d72d014096399d6e2bf03974d9da1 < 1c95574350cd63bc3c5c2fa06658010768f2a0ce, >= 757cc3e9ff1d72d014096399d6e2bf03974d9da1 < f4384b3e54ea813868bb81a861bf5b2406e15d8f, >= 5.6, >= 5.6 < 5.10.199, >= 5.11 < 5.15.136, >= 5.16 < 6.1.59, >= 6.2 < 6.5.8, 6.6

Fixed versions

5.10.199, 5.15.136, 6.1.59, 6.5.8

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416