CVE-2023-53138

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: net: caif: Fix use-after-free in cfusbl_device_notify() syzbot reported use-after-free in cfusbl_device_notify() [1]. This causes a stack trace like below: BUG: KASAN: use-after-free in cfusbl_device_notify+0x7c9/0x870 net/caif/caif_usb.c:138 Read of size 8 at addr ffff88807ac4e6f0 by task kworker/u4:6/1214 CPU: 0 PID: 1214 Comm: kworker/u4:6 Not tainted 5.19.0-rc3-syzkaller-00146-g92f20ff72066 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: netns cleanup_net Call Trac...

Affected product and versions

Product

Linux Linux, linux kernel

Affected versions

>= 7ad65bf68d705b445ef10b77ab50dab22be185ee < 68a45c3cf0e2242a533657f4f535d9b6a7447a79, >= 7ad65bf68d705b445ef10b77ab50dab22be185ee < 1793da97a23e31c5bf06631f3f3e5a25f368fd64, >= 7ad65bf68d705b445ef10b77ab50dab22be185ee < 9dc16be373b382ddd4c274052a6e870a95e76c01, >= 7ad65bf68d705b445ef10b77ab50dab22be185ee < c3aaec463a632cf4187dc017e421bfa69d7834a9, >= 7ad65bf68d705b445ef10b77ab50dab22be185ee < 3f14457e1584224f4296af613bbd99deb60b5d91, >= 7ad65bf68d705b445ef10b77ab50dab22be185ee < 287027d8a567168a5d8ce5cb0cba16a34791a48c, >= 7ad65bf68d705b445ef10b77ab50dab22be185ee < d1a11bbdbb5ea9f172019c5a4a3e9d8eabd72179, >= 7ad65bf68d705b445ef10b77ab50dab22be185ee < 9781e98a97110f5e76999058368b4be76a788484, >= 3.3, >= 3.3 < 4.14.310, >= 4.15 < 4.19.278, >= 4.20 < 5.4.237, >= 5.5 < 5.10.175, >= 5.11 < 5.15.103, >= 5.16 < 6.1.20, >= 6.2 < 6.2.7, 6.3

Fixed versions

4.14.310, 4.19.278, 5.4.237, 5.10.175, 5.15.103, 6.1.20, 6.2.7

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416