CVE-2023-53446

HIGH EPSS 3.8%
Published Sep 18, 20259mo ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
High
Find Similar
Published Sep 18, 2025 9mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free Struct pcie_link_state->downstream is a pointer to the pci_dev of function 0. Previously we retained that pointer when removing function 0, and subsequent ASPM policy changes dereferenced it, resulting in a use-after-free warning from KASAN, e.g.: # echo 1 > /sys/bus/pci/devices/0000:03:00.0/remove # echo powersave > /sys/module/pcie_aspm/parameters/policy BUG: KASAN: slab-use-after-free in pcie_config_aspm_link+0x42d/0x500 Call Trace: kasan_report+0xae/0xe0 pcie_config_aspm_link+0x42d/0x500 pcie_aspm_set_policy+0x8e/0x1a0 param_attr_store+0x162/0x2c0 module_attr_store+0x3e/0x80 PCIe spec r6.0, sec 7.5.3.7, recommends that software program the same ASPM Control value in all functions of multi-function devices. Disable ASPM and free the pcie_link_state when any child function is removed so we can discard the dangling pcie_link_state->downstream pointer and maintain the same ASPM Control configuration for all functions. [bhelgaas: commit log and comment]

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
3.8% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 6

VendorProductVersionRange
linuxlinux_kernel*≥4.11  –  <5.4.251
linuxlinux_kernel*≥5.5  –  <5.10.188
linuxlinux_kernel*≥5.11  –  <5.15.121
linuxlinux_kernel*≥5.16  –  <6.1.39
linuxlinux_kernel*≥6.2  –  <6.3.13
linuxlinux_kernel*≥6.4  –  <6.4.4

References 7

  • git.kernel.org https://git.kernel.org/stable/c/4203722d51afe3d239e03f15cc73efdf023a7103
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/456d8aa37d0f56fc9e985e812496e861dcd6f2f2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/666e7f9d60cee23077ea3e6331f6f8a19f7ea03f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7aecdd47910c51707696e8b0e045b9f88bd4230f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7badf4d6f49a358a01ab072bbff88d3ee886c33b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9856c0de49052174ab474113f4ba40c02aaee086
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d51d2eeae4ce54d542909c4d9d07bf371a78592c
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/4203722d51afe3d239e03f15cc73efdf023a7103
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/456d8aa37d0f56fc9e985e812496e861dcd6f2f2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/666e7f9d60cee23077ea3e6331f6f8a19f7ea03f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7aecdd47910c51707696e8b0e045b9f88bd4230f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7badf4d6f49a358a01ab072bbff88d3ee886c33b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9856c0de49052174ab474113f4ba40c02aaee086
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d51d2eeae4ce54d542909c4d9d07bf371a78592c
    Patch