CVE-2023-53613 — Use After Free in Linux

CWE-416 — Use After FreeCWE-1341 — Multiple Releases of Same Resource or Handle5 documents5 sources
Severity
7.8HIGHNVD
EPSS
0.0%
top 96.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedOct 4

Description

In the Linux kernel, the following vulnerability has been resolved: dax: Fix dax_mapping_release() use after free A CONFIG_DEBUG_KOBJECT_RELEASE test of removing a device-dax region provider (like modprobe -r dax_hmem) yields: kobject: 'mapping0' (ffff93eb460e8800): kobject_release, parent 0000000000000000 (delayed 2000) [..] DEBUG_LOCKS_WARN_ON(1) WARNING: CPU: 23 PID: 282 at kernel/locking/lockdep.c:232 __lock_acquire+0x9fc/0x2260 [..] RIP: 0010:__lock_acquire+0x9fc/0x2260 [..] Call Trace: …

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages4 packages

▶NVDlinux/linux_kernel5.10 — 5.10.188+4
▶Debianlinux/linux_kernel< 5.10.191-1+3
▶CVEListV5linux/linux0b07ce872a9eca1ff88c0eb7f6e92dde127d21ca — 94a85474f5e3e518bdbf8c9f51cb343d734a04f7+6
▶debiandebian/linux< linux 6.1.52-1 (bookworm)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
OSV
CVE-2023-53613: In the Linux kernel, the following vulnerability has been resolved: dax: Fix dax_mapping_release() use after free A CONFIG_DEBUG_KOBJECT_RELEASE test↗2025-10-04
▶
GHSA
GHSA-6789-c3xj-p7cq: In the Linux kernel, the following vulnerability has been resolved: dax: Fix dax_mapping_release() use after free A CONFIG_DEBUG_KOBJECT_RELEASE tes↗2025-10-04
▶

📋Vendor Advisories

2
Red Hat
kernel: dax: Fix dax_mapping_release() use after free↗2025-10-04
▶
Debian
CVE-2023-53613: linux - In the Linux kernel, the following vulnerability has been resolved: dax: Fix da...↗2023
▶