CVE-2023-54101

Not scored yetLast modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

driver: soc: xilinx: use _safe loop iterator to avoid a use after free

The hash_for_each_possible() loop dereferences "eve_data" to get the next item on the list. However the loop frees eve_data so it leads to a use after free. Use hash_for_each_possible_safe() instead.

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= c7fdb2404f66131bc9c22e06f712717288826487, < 49fca83f6f3f0cafe5bf5b43e8ee81cf73c2d5e0; >= c7fdb2404f66131bc9c22e06f712717288826487, < f16599e638073ef0b2828bb64f5e99138e9381b5; >= c7fdb2404f66131bc9c22e06f712717288826487, < 256aace3a5d8c987183ba4832dffb36f48ea7d3b; >= c7fdb2404f66131bc9c22e06f712717288826487, < c58da0ba3e5c86e51e2c1557afaf6f71e00c4533
LinuxLinux5.17

References

Timeline

Published
Dec 24, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-54102In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow A stCVE-2023-541047.8In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() 'op-cs'CVE-2023-54105In the Linux kernel, the following vulnerability has been resolved: can: isotp: check CAN address family in isotp_bind() Add missing checkCVE-2023-54106In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fix potential memory leak in mlx5e_init_rep_rx The memory poCVE-2023-541077.8In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: dropping parent refcount after pd_free_fn() is done Some cCVE-2023-54108In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests The followinCVE-2023-54109In the Linux kernel, the following vulnerability has been resolved: media: rcar_fdp1: Fix refcount leak in probe and remove function rcar_CVE-2023-54114.3The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_aCVE-2023-54110In the Linux kernel, the following vulnerability has been resolved: usb: rndis_host: Secure rndis_query check against int overflow VariablCVE-2023-54111In the Linux kernel, the following vulnerability has been resolved: pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups CVE-2023-54112In the Linux kernel, the following vulnerability has been resolved: kcm: Fix memory leak in error path of kcm_sendmsg() syzbot reported a CVE-2023-54113In the Linux kernel, the following vulnerability has been resolved: rcu: dump vmalloc memory info safely Currently, for double invoke call
CVE-2023-54101: Unscored | Vulnix