cbcvebase.
CVE-2023-52510
published 2024-03-02

CVE-2023-52510: In the Linux kernel, the following vulnerability has been resolved: ieee802154: ca8210: Fix a potential UAF in ca8210_probe If of_clk_add_provider() fails in…

PriorityP336high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.24%
15.5th percentile
In the Linux kernel, the following vulnerability has been resolved: ieee802154: ca8210: Fix a potential UAF in ca8210_probe If of_clk_add_provider() fails in ca8210_register_ext_clock(), it calls clk_unregister() to release priv->clk and returns an error. However, the caller ca8210_probe() then calls ca8210_remove(), where priv->clk is freed again in ca8210_unregister_ext_clock(). In this case, a use-after-free may happen in the second time we call clk_unregister(). Fix this by removing the first clk_unregister(). Also, priv->clk could be an error code on failure of clk_register_fixed_rate(). Use IS_ERR_OR_NULL to catch this case in ca8210_unregister_ext_clock().

Affected

23 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.64-1 (bookworm)linux 6.1.64-1 (bookworm)
linuxlinux
linuxlinux>= ded845a781a578dfb0b5b2c138e5a067aa3b1242 < 28b68cba378e3e50a4082b65f262bc4f2c7c2add28b68cba378e3e50a4082b65f262bc4f2c7c2add
linuxlinux>= ded845a781a578dfb0b5b2c138e5a067aa3b1242 < cdb46be93c1f7bbf2c4649e9fc5fb147cfb5245dcdb46be93c1f7bbf2c4649e9fc5fb147cfb5245d
linuxlinux>= ded845a781a578dfb0b5b2c138e5a067aa3b1242 < 85c2857ef90041f567ce98722c1c342c4d31f4bc85c2857ef90041f567ce98722c1c342c4d31f4bc
linuxlinux>= ded845a781a578dfb0b5b2c138e5a067aa3b1242 < 55e06850c7894f00d41b767c5f5665459f83f58f55e06850c7894f00d41b767c5f5665459f83f58f
linuxlinux>= ded845a781a578dfb0b5b2c138e5a067aa3b1242 < 84c6aa0ae5c4dc121f9996bb8fed46c80909d80e84c6aa0ae5c4dc121f9996bb8fed46c80909d80e
linuxlinux>= ded845a781a578dfb0b5b2c138e5a067aa3b1242 < 217efe32a45249eb07dcd7197e8403de98345e66217efe32a45249eb07dcd7197e8403de98345e66
linuxlinux>= ded845a781a578dfb0b5b2c138e5a067aa3b1242 < becf5c147198f4345243c5df0c4f035415491640becf5c147198f4345243c5df0c4f035415491640
linuxlinux>= ded845a781a578dfb0b5b2c138e5a067aa3b1242 < f990874b1c98fe8e57ee9385669f501822979258f990874b1c98fe8e57ee9385669f501822979258
linuxlinux_kernel
linuxlinux_kernel>= 0 < 5.10.205-15.10.205-1
linuxlinux_kernel>= 0 < 6.1.64-16.1.64-1
linuxlinux_kernel>= 0 < 6.5.8-16.5.8-1
linuxlinux_kernel>= 0 < 6.5.8-16.5.8-1
linuxlinux_kernel>= 0 < 4.15.0-230.2424.15.0-230.242
linuxlinux_kernel>= 4.12 < 4.14.3284.14.328
linuxlinux_kernel>= 4.15 < 4.19.2974.19.297
linuxlinux_kernel>= 4.20 < 5.4.2595.4.259
linuxlinux_kernel>= 5.11 < 5.15.1365.15.136
linuxlinux_kernel>= 5.16 < 6.1.596.1.59
linuxlinux_kernel>= 5.5 < 5.10.1995.10.199
linuxlinux_kernel>= 6.2 < 6.5.86.5.8

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
vendor_ubuntu7.8HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.