CVE-2023-54015 — Signal Handler Race Condition in Linux
Severity
5.7MEDIUM
No vectorEPSS
0.0%
top 89.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device
In case devcom allocation is failed, mlx5 is always freeing the priv.
However, this priv might have been allocated by a different thread,
and freeing it might lead to use-after-free bugs.
Fix it by freeing the priv only in case it was allocated by the
running thread.
Affected Packages4 packages
▶CVEListV5linux/linuxfadd59fc50d010145f251db583c7ccef37393d19 — 3dfc1004d9afbf689087ae1eafd88f55481984c7+6
🔴Vulnerability Details
3GHSA▶
GHSA-mx7v-5j4q-68wr: In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device
In case devcom a↗2025-12-24
OSV▶
CVE-2023-54015: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device In case devcom all↗2025-12-24