NetSight
IP …
high7.8

CVE-2023-53219

In the Linux kernel, the following vulnerability has been resolved: media: netup_unidvb: fix use-after-free at del_timer() When Universal DVB card is detaching…

Impact

In the Linux kernel, the following vulnerability has been resolved: media: netup_unidvb: fix use-after-free at del_timer() When Universal DVB card is detaching, netup_unidvb_dma_fini() uses del_timer() to stop dma->timeout timer. But when timer handler netup_unidvb_dma_timeout() is running, del_timer() could not stop it. As a result, the use-after-free bug could happen. The process is shown below: (cleanup routine) | (timer routine) | mod_timer(&dev->tx_sim_timer, ..) netup_unidvb_finidev() | (wait a time) netup_unidvb_dma_fini() | netup_unidvb_dma_timeout() del_timer(&dma->timeout); | | ndev->pci_dev->dev //USE Fix by changing del_timer() to del_timer_sync().

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.3 before 4.14.316
from 4.15 before 4.19.284
from 4.20 before 5.4.244
from 5.5 before 5.10.181
from 5.11 before 5.15.113
from 5.16 before 6.1.30

Weakness classification

CWE-416

References