CVE - CVE-2023-53003

CVE-ID
CVE-2023-53003	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info The memory for llcc_driv_data is allocated by the LLCC driver. But when it is passed as the private driver info to the EDAC core, it will get freed during the qcom_edac driver release. So when the qcom_edac driver gets probed again, it will try to use the freed data leading to the use-after-free bug. Hence, do not pass llcc_driv_data as pvt_info but rather reference it using the platform_data pointer in the qcom_edac driver.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/66e10d5f399629ef7877304d9ba2b35d0474e7eb URL:https://git.kernel.org/stable/c/66e10d5f399629ef7877304d9ba2b35d0474e7eb MISC:https://git.kernel.org/stable/c/6f0351d0c311951b8b3064db91e61841e85b2b96 URL:https://git.kernel.org/stable/c/6f0351d0c311951b8b3064db91e61841e85b2b96 MISC:https://git.kernel.org/stable/c/76d9ebb7f0bc10fbc78b6d576751552edf743968 URL:https://git.kernel.org/stable/c/76d9ebb7f0bc10fbc78b6d576751552edf743968 MISC:https://git.kernel.org/stable/c/977c6ba624f24ae20cf0faee871257a39348d4a9 URL:https://git.kernel.org/stable/c/977c6ba624f24ae20cf0faee871257a39348d4a9 MISC:https://git.kernel.org/stable/c/bff5243bd32661cf9ce66f6d9210fc8f89bda145 URL:https://git.kernel.org/stable/c/bff5243bd32661cf9ce66f6d9210fc8f89bda145
Assigning CNA
kernel.org
Date Record Created
20250327	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250327)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)