CVE-2023-54026 — Expired Pointer Dereference in Linux
Severity
4.7MEDIUM
No vectorEPSS
0.0%
top 92.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
opp: Fix use-after-free in lazy_opp_tables after probe deferral
When dev_pm_opp_of_find_icc_paths() in _allocate_opp_table() returns
-EPROBE_DEFER, the opp_table is freed again, to wait until all the
interconnect paths are available.
However, if the OPP table is using required-opps then it may already
have been added to the global lazy_opp_tables list. The error path
does not remove the opp_table from the list again.
This ca…
Affected Packages4 packages
▶CVEListV5linux/linux7eba0c7641b0009818e469dbfcdd87a0155ab9d4 — 39a0e723d3502f6dc4c603f57ebe8dc7bcc4a4bc+4
🔴Vulnerability Details
3OSV▶
CVE-2023-54026: In the Linux kernel, the following vulnerability has been resolved: opp: Fix use-after-free in lazy_opp_tables after probe deferral When dev_pm_opp_of↗2025-12-24
GHSA▶
GHSA-m34w-8vx7-2jww: In the Linux kernel, the following vulnerability has been resolved:
opp: Fix use-after-free in lazy_opp_tables after probe deferral
When dev_pm_opp_↗2025-12-24