CVE-2023-53003

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info

The memory for llcc_driv_data is allocated by the LLCC driver. But when it is passed as the private driver info to the EDAC core, it will get freed during the qcom_edac driver release. So when the qcom_edac driver gets probed again, it will try to use the freed data leading to the use-after-free bug.

Hence, do not pass llcc_driv_data as pvt_info but rather reference it using the platform_data pointer in the qcom_edac driver.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
LinuxLinux>= 27450653f1db0b9d5b5048a246c850c52ee4aa61, < 66e10d5f399629ef7877304d9ba2b35d0474e7eb; >= 27450653f1db0b9d5b5048a246c850c52ee4aa61, < 76d9ebb7f0bc10fbc78b6d576751552edf743968; >= 27450653f1db0b9d5b5048a246c850c52ee4aa61, < bff5243bd32661cf9ce66f6d9210fc8f89bda145; >= 27450653f1db0b9d5b5048a246c850c52ee4aa61, < 6f0351d0c311951b8b3064db91e61841e85b2b96; >= 27450653f1db0b9d5b5048a246c850c52ee4aa61, < 977c6ba624f24ae20cf0faee871257a39348d4a9
LinuxLinux4.20

References

Timeline

Published
Mar 27, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-530045.5In the Linux kernel, the following vulnerability has been resolved: ovl: fix tmpfile leak Missed an error cleanup.CVE-2023-530055.5In the Linux kernel, the following vulnerability has been resolved: trace_events_hist: add check for return value of 'create_hist_field' FCVE-2023-530065.5In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uncleared server->smbd_conn in reconnect In smbdCVE-2023-530075.5In the Linux kernel, the following vulnerability has been resolved: tracing: Make sure trace_printk() can output as soon as it can be used CVE-2023-530085.5In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential memory leaks in session setup Make sure to free ciCVE-2023-530095.5In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add sync after creating vram bo There will be data corruptCVE-2023-53018.8A vulnerability classified as critical was found in DedeCMS 5.7.111. This vulnerability affects the function AddMyAddon of the file album_adCVE-2023-530105.5In the Linux kernel, the following vulnerability has been resolved: bnxt: Do not read past the end of test names Test names were being conCVE-2023-530115.5In the Linux kernel, the following vulnerability has been resolved: net: stmmac: enable all safety features by default In the original impCVE-2023-530125.5In the Linux kernel, the following vulnerability has been resolved: thermal: core: call put_device() only after device_register() fails puCVE-2023-530135.5In the Linux kernel, the following vulnerability has been resolved: ptdma: pt_core_execute_cmd() should use spinlock The interrupt handlerCVE-2023-530145.5In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra: Fix memory leak in terminate_all() Terminate vdesc w
CVE-2023-53003: High severity, CVSS 7.8 | Vulnix