CVE-2023-52847

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a use-after-free error in the bttv component of the Linux kernel, specifically due to a race condition between the bttv irq timeout timer function and the bttv remove function. The timer is set up in the probe and there is no timer delete operation in the remove function, which can cause the bttv irq timeout function to still be invoked after the btv object has been freed, leading to a use-after-free bug. This bug was found through static analysis and may be a false positive.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.