CVE-2023-52907

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a use-after-free vulnerability in the Linux kernel's NFC component, specifically in the pn533 module. This occurs when the in urb sent from pn533 usb send frame() is completed earlier than out urb, and its callback frees the skb data used as a transfer buffer for out urb. To fix this, the kernel now waits for the completion of out urb before sending in urb. The vulnerability was found by a modified version of syzkaller. Technical details include the involvement of pn533 send async complete() and the need to separate the complete function of out urb and ack urb.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.