CVE-2023-54015

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the net/mlx5 component, specifically in the mlx5 devcom register device function. A use-after-free condition can occur if devcom allocation fails, potentially leading to instability or compromise. The issue arises because the private memory (priv) might be freed by a thread that did not allocate it, resulting in a use-after-free scenario. The fix ensures that priv is only freed by the thread that originally allocated it.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.