CVE - CVE-2023-52509

CVE-ID
CVE-2023-52509	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: ravb: Fix use-after-free issue in ravb_tx_timeout_work() The ravb_stop() should call cancel_work_sync(). Otherwise, ravb_tx_timeout_work() is possible to use the freed priv after ravb_remove() was called like below: CPU0 CPU1 ravb_tx_timeout() ravb_remove() unregister_netdev() free_netdev(ndev) // free priv ravb_tx_timeout_work() // use priv unregister_netdev() will call .ndo_stop() so that ravb_stop() is called. And, after phy_stop() is called, netif_carrier_off() is also called. So that .ndo_tx_timeout() will not be called after phy_stop().
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/105abd68ad8f781985113aee2e92e0702b133705 URL:https://git.kernel.org/stable/c/105abd68ad8f781985113aee2e92e0702b133705 MISC:https://git.kernel.org/stable/c/3971442870713de527684398416970cf025b4f89 URL:https://git.kernel.org/stable/c/3971442870713de527684398416970cf025b4f89 MISC:https://git.kernel.org/stable/c/616761cf9df9af838c0a1a1232a69322a9eb67e6 URL:https://git.kernel.org/stable/c/616761cf9df9af838c0a1a1232a69322a9eb67e6 MISC:https://git.kernel.org/stable/c/65d34cfd4e347054eb4193bc95d9da7eaa72dee5 URL:https://git.kernel.org/stable/c/65d34cfd4e347054eb4193bc95d9da7eaa72dee5 MISC:https://git.kernel.org/stable/c/6f6fa8061f756aedb93af12a8a5d3cf659127965 URL:https://git.kernel.org/stable/c/6f6fa8061f756aedb93af12a8a5d3cf659127965 MISC:https://git.kernel.org/stable/c/db9aafa19547833240f58c2998aed7baf414dc82 URL:https://git.kernel.org/stable/c/db9aafa19547833240f58c2998aed7baf414dc82
Assigning CNA
kernel.org
Date Record Created
20240220	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240220)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)