CVE-2023-53484

Source
https://cve.org/CVERecord?id=CVE-2023-53484
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53484.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-53484
Downstream
Related
Published
2025-10-01T11:42:52.590Z
Modified
2026-05-28T03:53:47.089118220Z
Summary
lib: cpu_rmap: Avoid use after free on rmap->obj array entries
Details

In the Linux kernel, the following vulnerability has been resolved:

lib: cpu_rmap: Avoid use after free on rmap->obj array entries

When calling irqsetaffinitynotifier() with NULL at the notify argument, it will cause freeing of the glue pointer in the corresponding array entry but will leave the pointer in the array. A subsequent call to freeirqcpurmap() will try to free this entry again leading to possible use after free.

Fix that by setting NULL to the array entry and checking that we have non-zero at the array entry when iterating over the array in freeirqcpu_rmap().

The current code does not suffer from this since there are no cases where irqsetaffinitynotifier(irq, NULL) (note the NULL passed for the notify arg) is called, followed by a call to freeirqcpurmap() so we don't hit and issue. Subsequent patches in this series excersize this flow, hence the required fix.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53484.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
896f97ea95c1d29c0520ee0766b66b7f64cb967c
Fixed
981f339d2905b6a92ef59358158b326493aecac5
Fixed
d1308bd0b24cb1d78fa2747d5fa3e055cc628a48
Fixed
cc2d2b3dbfb0ba57bc027fb7e1121250c50e4000
Fixed
f748e15253833b771acbede14ea98f50831ac289
Fixed
c6ed54dd90698dc0744d669524cc1c122ded8a16
Fixed
c9115f49cf260d24d8b5f2d9a4b63cb31a627bb4
Fixed
67bca5f1d644f4e79b694abd8052a177de81c37f
Fixed
4e0473f1060aa49621d40a113afde24818101d37

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53484.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.8.0
Fixed
4.14.316
Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
4.19.284
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.244
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.181
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.113
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.30
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.3.4

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53484.json"