Vulnerability in Linux

CVE-2023-54015

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device In case devcom allocation is failed, mlx5 is always freeing the priv. However, this priv might have been allocated by a different thread, and freeing it might lead to use-after-free bugs. Fix it by freeing the priv only in case it was allocated by the running thread.

EPSS: 0.002 (7.8th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions fadd59fc50d010145f251db583c7ccef37393d19, 5.0, 0

References