CVE-2023-53479

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the CXL driver within the Linux kernel, specifically in the cxl parse cfmws() function. The problem occurs in the cxl decoder add() fail path, where memory pointed to by cxld is released via put device() and subsequently accessed. This results in a use-after-free condition detected by KASAN and KFENCE. The issue is addressed by using local variables within the dev err() function instead of referencing the released memory, and by changing the print format specifier to %pr.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.