CVE - CVE-2023-52859

CVE-ID
CVE-2023-52859	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: perf: hisi: Fix use-after-free when register pmu fails When we fail to register the uncore pmu, the pmu context may not been allocated. The error handing will call cpuhp_state_remove_instance() to call uncore pmu offline callback, which migrate the pmu context. Since that's liable to lead to some kind of use-after-free. Use cpuhp_state_remove_instance_nocalls() instead of cpuhp_state_remove_instance() so that the notifiers don't execute after the PMU device has been failed to register.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0e1e88bba286621b886218363de07b319d6208b2 URL:https://git.kernel.org/stable/c/0e1e88bba286621b886218363de07b319d6208b2 MISC:https://git.kernel.org/stable/c/3405f364f82d4f5407a8b4c519dc15d24b847fda URL:https://git.kernel.org/stable/c/3405f364f82d4f5407a8b4c519dc15d24b847fda MISC:https://git.kernel.org/stable/c/75bab28ffd05ec8879c197890b1bd1dfec8d3f63 URL:https://git.kernel.org/stable/c/75bab28ffd05ec8879c197890b1bd1dfec8d3f63 MISC:https://git.kernel.org/stable/c/b660420f449d094b1fabfa504889810b3a63cdd5 URL:https://git.kernel.org/stable/c/b660420f449d094b1fabfa504889810b3a63cdd5 MISC:https://git.kernel.org/stable/c/b805cafc604bfdb671fae7347a57f51154afa735 URL:https://git.kernel.org/stable/c/b805cafc604bfdb671fae7347a57f51154afa735
Assigning CNA
kernel.org
Date Record Created
20240521	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240521)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)