CVE-2023-52837

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free (UAF) issue has been resolved in the Linux kernel. The issue occurs when someone tries to open an nbd device right after nbd put(), since nbd has been freed in nbd dev remove(). This is due to the disk being cleaned up by blk cleanup disk(), which does not set disk->private data to NULL as before. The fix involves implementing ->free disk and freeing private data in it.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.