CVE-2023-54142

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0-rc5-01219-gfa0e21fa4443

Description The Linux kernel contains a use-after-free issue within the gtp (Generic Tunneling Protocol) subsystem, specifically in the gtp encap destroy() function. The issue occurs because release sock() is called after sock put() releases the last reference count, leading to a use-after-free condition. This was identified by syzkaller, which reported that the same process freed a socket (sk) and subsequently accessed it illegally. The commit e198987e7dd7 attempted to address this by adding lock sock() and release sock(), but the timing of release sock() remains problematic.

Recommendations Upgrade to Linux kernel version 6.4.0-rc5-01219-gfa0e21fa4443 or a later version to resolve this issue.