CVE-2023-53613

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the DAX (Direct Access) subsystem related to a use-after-free condition in the dax mapping release() function. This issue occurs when removing a device-dax region provider, potentially leading to a system crash or unexpected behavior. The root cause is an attempt to free an IDA (Increment and Decrement Allocator) object that has already been freed. The fix involves ensuring that a dax mapping pins its parent dev dax instance until dax mapping release() completes, preventing the premature release of the parent object.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.