CVE-2023-53047
published 2025-05-02CVE-2023-53047: In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix race condition in amdtee_open_session There is a potential race condition…
PriorityP416medium4.7CVSS 3.1
AVLACHPRLUINSUCNINAH
EPSS
0.14%
3.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
tee: amdtee: fix race condition in amdtee_open_session
There is a potential race condition in amdtee_open_session that may
lead to use-after-free. For instance, in amdtee_open_session() after
sess->sess_mask is set, and before setting:
sess->session_info[i] = session_info;
if amdtee_close_session() closes this same session, then 'sess' data
structure will be released, causing kernel panic when 'sess' is
accessed within amdtee_open_session().
The solution is to set the bit sess->sess_mask as the last step in
amdtee_open_session().
Affected
18 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.25-1 (bookworm) | linux 6.1.25-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 757cc3e9ff1d72d014096399d6e2bf03974d9da1 < f632a90f8e39db39b322107b9a8d438b826a7f4f | f632a90f8e39db39b322107b9a8d438b826a7f4f |
| linux | linux | >= 757cc3e9ff1d72d014096399d6e2bf03974d9da1 < 02b296978a2137d7128151c542e84dc96400bc00 | 02b296978a2137d7128151c542e84dc96400bc00 |
| linux | linux | >= 757cc3e9ff1d72d014096399d6e2bf03974d9da1 < a63cce9393e4e7dbc5af82dc87e68cb321cb1a78 | a63cce9393e4e7dbc5af82dc87e68cb321cb1a78 |
| linux | linux | >= 757cc3e9ff1d72d014096399d6e2bf03974d9da1 < b3ef9e6fe09f1a132af28c623edcf4d4f39d9f35 | b3ef9e6fe09f1a132af28c623edcf4d4f39d9f35 |
| linux | linux | >= 757cc3e9ff1d72d014096399d6e2bf03974d9da1 < f8502fba45bd30e1a6a354d9d898bc99d1a11e6d | f8502fba45bd30e1a6a354d9d898bc99d1a11e6d |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 5.11 < 5.15.105 | 5.15.105 |
| linux | linux_kernel | >= 5.16 < 6.1.22 | 6.1.22 |
| linux | linux_kernel | >= 5.6 < 5.10.177 | 5.10.177 |
| linux | linux_kernel | >= 6.2 < 6.2.9 | 6.2.9 |
CVSS provenance
nvdv3.14.7MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
osv4.7MEDIUM
vendor_debian4.7MEDIUM
vendor_redhat4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-r348-7mvp-g684: In the Linux kernel, the following vulnerability has been resolved:
tee: amdtee: fix race condition in amdtee_open_session
There is a potential race
ghsa_unreviewed·2025-05-02
CVE-2023-53047 [MEDIUM] CWE-362 GHSA-r348-7mvp-g684: In the Linux kernel, the following vulnerability has been resolved:
tee: amdtee: fix race condition in amdtee_open_session
There is a potential race
In the Linux kernel, the following vulnerability has been resolved:
tee: amdtee: fix race condition in amdtee_open_session
There is a potential race condition in amdtee_open_session that may
lead to use-after-free. For instance, in amdtee_open_session() after
sess->sess_mask is set, and before setting:
sess->session_info[i] = session_info;
if amdtee_close_session() closes this same session, then 'sess' data
structure will be released, causing kernel panic when 'sess' is
accessed within amdtee_open_session().
The solution is to set the bit sess->sess_mask as the last step in
amdtee_open_session().
OSV
CVE-2023-53047: In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix race condition in amdtee_open_session There is a potential race c
osv·2025-05-02·CVSS 4.7
CVE-2023-53047 [MEDIUM] CVE-2023-53047: In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix race condition in amdtee_open_session There is a potential race c
In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix race condition in amdtee_open_session There is a potential race condition in amdtee_open_session that may lead to use-after-free. For instance, in amdtee_open_session() after sess->sess_mask is set, and before setting: sess->session_info[i] = session_info; if amdtee_close_session() closes this same session, then 'sess' data structure will be released, causing kernel panic when 'sess' is accessed within amdtee_open_session(). The solution is to set the bit sess->sess_mask as the last step in amdtee_open_session().
Red Hat
kernel: tee: amdtee: fix race condition in amdtee_open_session
vendor_redhat·2025-05-02·CVSS 4.7
CVE-2023-53047 [MEDIUM] CWE-826 kernel: tee: amdtee: fix race condition in amdtee_open_session
kernel: tee: amdtee: fix race condition in amdtee_open_session
In the Linux kernel, the following vulnerability has been resolved:
tee: amdtee: fix race condition in amdtee_open_session
There is a potential race condition in amdtee_open_session that may
lead to use-after-free. For instance, in amdtee_open_session() after
sess->sess_mask is set, and before setting:
sess->session_info[i] = session_info;
if amdtee_close_session() closes this same session, then 'sess' data
structure will be released, causing kernel panic when 'sess' is
accessed within amdtee_open_session().
The solution is to set the bit sess->sess_mask as the last step in
amdtee_open_session().
A use-after-free vulnerability was found in the AMD TEE driver in the Linux kernel. The flaw occurs from a race condition in the `a
Debian
CVE-2023-53047: linux - In the Linux kernel, the following vulnerability has been resolved: tee: amdtee...
vendor_debian·2023·CVSS 4.7
CVE-2023-53047 [MEDIUM] CVE-2023-53047: linux - In the Linux kernel, the following vulnerability has been resolved: tee: amdtee...
In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix race condition in amdtee_open_session There is a potential race condition in amdtee_open_session that may lead to use-after-free. For instance, in amdtee_open_session() after sess->sess_mask is set, and before setting: sess->session_info[i] = session_info; if amdtee_close_session() closes this same session, then 'sess' data structure will be released, causing kernel panic when 'sess' is accessed within amdtee_open_session(). The solution is to set the bit sess->sess_mask as the last step in amdtee_open_session().
Scope: local
bookworm: resolved (fixed in 6.1.25-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.25-1)
sid: resolved (fixed in 6.1.25-1)
trixie: resolved (fixed in 6.1.25
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/02b296978a2137d7128151c542e84dc96400bc00https://git.kernel.org/stable/c/a63cce9393e4e7dbc5af82dc87e68cb321cb1a78https://git.kernel.org/stable/c/b3ef9e6fe09f1a132af28c623edcf4d4f39d9f35https://git.kernel.org/stable/c/f632a90f8e39db39b322107b9a8d438b826a7f4fhttps://git.kernel.org/stable/c/f8502fba45bd30e1a6a354d9d898bc99d1a11e6d
2025-05-02
Published