CVE - CVE-2023-52469

CVE-ID
CVE-2023-52469	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: drivers/amd/pm: fix a use-after-free in kv_parse_power_table When ps allocated by kzalloc equals to NULL, kv_parse_power_table frees adev->pm.dpm.ps that allocated before. However, after the control flow goes through the following call chains: kv_parse_power_table \|-> kv_dpm_init \|-> kv_dpm_sw_init \|-> kv_dpm_fini The adev->pm.dpm.ps is used in the for loop of kv_dpm_fini after its first free in kv_parse_power_table and causes a use-after-free bug.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/28dd788382c43b330480f57cd34cde0840896743 URL:https://git.kernel.org/stable/c/28dd788382c43b330480f57cd34cde0840896743 MISC:https://git.kernel.org/stable/c/3426f059eacc33ecc676b0d66539297e1cfafd02 URL:https://git.kernel.org/stable/c/3426f059eacc33ecc676b0d66539297e1cfafd02 MISC:https://git.kernel.org/stable/c/35fa2394d26e919f63600ce631e6aefc95ec2706 URL:https://git.kernel.org/stable/c/35fa2394d26e919f63600ce631e6aefc95ec2706 MISC:https://git.kernel.org/stable/c/520e213a0b97b64735a13950e9371e0a5d7a5dc3 URL:https://git.kernel.org/stable/c/520e213a0b97b64735a13950e9371e0a5d7a5dc3 MISC:https://git.kernel.org/stable/c/8a27d9d9fc9b5564b8904c3a77a7dea482bfa34e URL:https://git.kernel.org/stable/c/8a27d9d9fc9b5564b8904c3a77a7dea482bfa34e MISC:https://git.kernel.org/stable/c/8b55b06e737feb2a645b0293ea27e38418876d63 URL:https://git.kernel.org/stable/c/8b55b06e737feb2a645b0293ea27e38418876d63 MISC:https://git.kernel.org/stable/c/95084632a65d5c0d682a83b55935560bdcd2a1e3 URL:https://git.kernel.org/stable/c/95084632a65d5c0d682a83b55935560bdcd2a1e3 MISC:https://git.kernel.org/stable/c/b6dcba02ee178282e0d28684d241e0b8462dea6a URL:https://git.kernel.org/stable/c/b6dcba02ee178282e0d28684d241e0b8462dea6a
Assigning CNA
kernel.org
Date Record Created
20240220	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240220)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)