NetSight
IP …
high7.8

CVE-2023-52859

In the Linux kernel, the following vulnerability has been resolved: perf: hisi: Fix use-after-free when register pmu fails When we fail to register the uncore …

Impact

In the Linux kernel, the following vulnerability has been resolved: perf: hisi: Fix use-after-free when register pmu fails When we fail to register the uncore pmu, the pmu context may not been allocated. The error handing will call cpuhp_state_remove_instance() to call uncore pmu offline callback, which migrate the pmu context. Since that's liable to lead to some kind of use-after-free. Use cpuhp_state_remove_instance_nocalls() instead of cpuhp_state_remove_instance() so that the notifiers don't execute after the PMU device has been failed to register.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.13 before 5.15.139
from 5.16 before 6.1.63
from 6.2 before 6.5.12
from 6.6 before 6.6.2

Weakness classification

CWE-416

References