In the Linux kernel, the following vulnerability has been resolved:
EDAC/qcom: Do not pass llccdrivdata as edacdevicectlinfo's pvtinfo
The memory for llccdrivdata is allocated by the LLCC driver. But when it is passed as the private driver info to the EDAC core, it will get freed during the qcomedac driver release. So when the qcomedac driver gets probed again, it will try to use the freed data leading to the use-after-free bug.
Hence, do not pass llccdrivdata as pvtinfo but rather reference it using the platformdata pointer in the qcom_edac driver.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53003.json",
"cna_assigner": "Linux"
}"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53003.json"
[
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 1183.0,
"function_hash": "325275076386568812312730344734030712883"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bff5243bd32661cf9ce66f6d9210fc8f89bda145",
"id": "CVE-2023-53003-1b2d3654",
"target": {
"file": "drivers/edac/qcom_edac.c",
"function": "llcc_ecc_irq_handler"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 898.0,
"function_hash": "282244667322785257603212937695556138267"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76d9ebb7f0bc10fbc78b6d576751552edf743968",
"id": "CVE-2023-53003-208b25a3",
"target": {
"file": "drivers/edac/qcom_edac.c",
"function": "qcom_llcc_edac_probe"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 1183.0,
"function_hash": "325275076386568812312730344734030712883"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@977c6ba624f24ae20cf0faee871257a39348d4a9",
"id": "CVE-2023-53003-2a361437",
"target": {
"file": "drivers/edac/qcom_edac.c",
"function": "llcc_ecc_irq_handler"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 710.0,
"function_hash": "291975527324466676073004828076024401748"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@977c6ba624f24ae20cf0faee871257a39348d4a9",
"id": "CVE-2023-53003-3bd965af",
"target": {
"file": "drivers/edac/qcom_edac.c",
"function": "dump_syn_reg"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 710.0,
"function_hash": "291975527324466676073004828076024401748"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bff5243bd32661cf9ce66f6d9210fc8f89bda145",
"id": "CVE-2023-53003-4b92e7da",
"target": {
"file": "drivers/edac/qcom_edac.c",
"function": "dump_syn_reg"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 898.0,
"function_hash": "282244667322785257603212937695556138267"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bff5243bd32661cf9ce66f6d9210fc8f89bda145",
"id": "CVE-2023-53003-4cc84e70",
"target": {
"file": "drivers/edac/qcom_edac.c",
"function": "qcom_llcc_edac_probe"
}
},
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"221347805235060567713946183579338848481",
"99083867838019569991482625766376531950",
"313166866449695548711661808402180844041",
"154298631705718176860096979227902112065",
"19673016302046694952674996552840468407",
"203837766923295488795142148773398300694",
"59370718484255946874555722313070763144",
"295846594258220083217406272844967285199",
"39995949175763641974994590949525754666",
"280027715147977076040931162515766406789",
"55156295420688235865461075078242648023",
"281340559381490426285115034989063437685"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76d9ebb7f0bc10fbc78b6d576751552edf743968",
"id": "CVE-2023-53003-54c126f8",
"target": {
"file": "drivers/edac/qcom_edac.c"
}
},
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"221347805235060567713946183579338848481",
"99083867838019569991482625766376531950",
"313166866449695548711661808402180844041",
"154298631705718176860096979227902112065",
"19673016302046694952674996552840468407",
"203837766923295488795142148773398300694",
"59370718484255946874555722313070763144",
"295846594258220083217406272844967285199",
"39995949175763641974994590949525754666",
"280027715147977076040931162515766406789",
"55156295420688235865461075078242648023",
"281340559381490426285115034989063437685"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@977c6ba624f24ae20cf0faee871257a39348d4a9",
"id": "CVE-2023-53003-69c629fd",
"target": {
"file": "drivers/edac/qcom_edac.c"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 1183.0,
"function_hash": "325275076386568812312730344734030712883"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76d9ebb7f0bc10fbc78b6d576751552edf743968",
"id": "CVE-2023-53003-7bba665b",
"target": {
"file": "drivers/edac/qcom_edac.c",
"function": "llcc_ecc_irq_handler"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 898.0,
"function_hash": "282244667322785257603212937695556138267"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f0351d0c311951b8b3064db91e61841e85b2b96",
"id": "CVE-2023-53003-862510e2",
"target": {
"file": "drivers/edac/qcom_edac.c",
"function": "qcom_llcc_edac_probe"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 898.0,
"function_hash": "282244667322785257603212937695556138267"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@977c6ba624f24ae20cf0faee871257a39348d4a9",
"id": "CVE-2023-53003-914c0f2f",
"target": {
"file": "drivers/edac/qcom_edac.c",
"function": "qcom_llcc_edac_probe"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 1183.0,
"function_hash": "325275076386568812312730344734030712883"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f0351d0c311951b8b3064db91e61841e85b2b96",
"id": "CVE-2023-53003-b8ec1203",
"target": {
"file": "drivers/edac/qcom_edac.c",
"function": "llcc_ecc_irq_handler"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 710.0,
"function_hash": "291975527324466676073004828076024401748"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76d9ebb7f0bc10fbc78b6d576751552edf743968",
"id": "CVE-2023-53003-d4bd375b",
"target": {
"file": "drivers/edac/qcom_edac.c",
"function": "dump_syn_reg"
}
},
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"221347805235060567713946183579338848481",
"99083867838019569991482625766376531950",
"313166866449695548711661808402180844041",
"154298631705718176860096979227902112065",
"19673016302046694952674996552840468407",
"203837766923295488795142148773398300694",
"59370718484255946874555722313070763144",
"295846594258220083217406272844967285199",
"39995949175763641974994590949525754666",
"280027715147977076040931162515766406789",
"55156295420688235865461075078242648023",
"281340559381490426285115034989063437685"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f0351d0c311951b8b3064db91e61841e85b2b96",
"id": "CVE-2023-53003-e316a46c",
"target": {
"file": "drivers/edac/qcom_edac.c"
}
},
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"221347805235060567713946183579338848481",
"99083867838019569991482625766376531950",
"313166866449695548711661808402180844041",
"154298631705718176860096979227902112065",
"19673016302046694952674996552840468407",
"203837766923295488795142148773398300694",
"59370718484255946874555722313070763144",
"295846594258220083217406272844967285199",
"39995949175763641974994590949525754666",
"280027715147977076040931162515766406789",
"55156295420688235865461075078242648023",
"281340559381490426285115034989063437685"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bff5243bd32661cf9ce66f6d9210fc8f89bda145",
"id": "CVE-2023-53003-f6444827",
"target": {
"file": "drivers/edac/qcom_edac.c"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 710.0,
"function_hash": "291975527324466676073004828076024401748"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f0351d0c311951b8b3064db91e61841e85b2b96",
"id": "CVE-2023-53003-fd550343",
"target": {
"file": "drivers/edac/qcom_edac.c",
"function": "dump_syn_reg"
}
}
]