NetSight
IP …
high7.8

CVE-2023-52445

In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix use after free on context disconnection Upon module load, a kthread is …

Impact

In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix use after free on context disconnection Upon module load, a kthread is created targeting the pvr2_context_thread_func function, which may call pvr2_context_destroy and thus call kfree() on the context object. However, that might happen before the usb hub_event handler is able to notify the driver. This patch adds a sanity check before the invalid read reported by syzbot, within the context disconnection call stack.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.19.306
from 4.20 before 5.4.268
from 5.5.0 before 5.10.209
from 5.11.0 before 5.15.148
from 5.16.0 before 6.1.75
from 6.2.0 before 6.6.14

Weakness classification

CWE-416

References