CVE-2023-53023

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue has been identified in the Linux kernel, specifically in the local cleanup() function. This issue occurs when the nfc daemon is killed after detaching an nfc device, leading to a double-free scenario. The problem arises from the local cleanup() function being called twice, once from nfc llcp unregister device() and again from local release(), resulting in the local->rx pending being freed twice. This vulnerability was discovered using a modified version of syzkaller.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.