CVE-2023-53003

HIGH EPSS 15.6%
Published Mar 27, 20251y ago · Modified Jun 17, 20262w ago
7.8 CVSS 3.1
High
Find Similar
Published Mar 27, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info The memory for llcc_driv_data is allocated by the LLCC driver. But when it is passed as the private driver info to the EDAC core, it will get freed during the qcom_edac driver release. So when the qcom_edac driver gets probed again, it will try to use the freed data leading to the use-after-free bug. Hence, do not pass llcc_driv_data as pvt_info but rather reference it using the platform_data pointer in the qcom_edac driver.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
15.6% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 9

VendorProductVersionRange
linuxlinux_kernel*≥4.20  –  <5.4.231
linuxlinux_kernel*≥5.5  –  <5.10.166
linuxlinux_kernel*≥5.11  –  <5.15.91
linuxlinux_kernel*≥5.16  –  <6.1.9
linuxlinux_kernel6.2any
linuxlinux_kernel6.2any
linuxlinux_kernel6.2any
linuxlinux_kernel6.2any
linuxlinux_kernel6.2any

References 5

  • git.kernel.org https://git.kernel.org/stable/c/66e10d5f399629ef7877304d9ba2b35d0474e7eb
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6f0351d0c311951b8b3064db91e61841e85b2b96
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/76d9ebb7f0bc10fbc78b6d576751552edf743968
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/977c6ba624f24ae20cf0faee871257a39348d4a9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bff5243bd32661cf9ce66f6d9210fc8f89bda145
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/66e10d5f399629ef7877304d9ba2b35d0474e7eb
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6f0351d0c311951b8b3064db91e61841e85b2b96
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/76d9ebb7f0bc10fbc78b6d576751552edf743968
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/977c6ba624f24ae20cf0faee871257a39348d4a9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bff5243bd32661cf9ce66f6d9210fc8f89bda145
    Patch