In the Linux kernel, the following vulnerability has been resolved:
drivers/amd/pm: fix a use-after-free in kvparsepower_table
When ps allocated by kzalloc equals to NULL, kvparsepower_table frees adev->pm.dpm.ps that allocated before. However, after the control flow goes through the following call chains:
kvparsepowertable |-> kvdpminit |-> kvdpmswinit |-> kvdpmfini
The adev->pm.dpm.ps is used in the for loop of kvdpmfini after its first free in kvparsepower_table and causes a use-after-free bug.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52469.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52469.json"
[
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@520e213a0b97b64735a13950e9371e0a5d7a5dc3",
"digest": {
"line_hashes": [
"76247166132604209831182969450492292098",
"204528475744014314598655177098745375301",
"54008243735318393901927056708429710102",
"4518844406556724580719940570630924962",
"255399333938970866779294629458578496299",
"113365224892704046405914542481746384359",
"188742528184198787122919520106708977369"
],
"threshold": 0.9
},
"id": "CVE-2023-52469-4d09f123",
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/pm/powerplay/kv_dpm.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a27d9d9fc9b5564b8904c3a77a7dea482bfa34e",
"digest": {
"line_hashes": [
"76247166132604209831182969450492292098",
"204528475744014314598655177098745375301",
"54008243735318393901927056708429710102",
"4518844406556724580719940570630924962",
"255399333938970866779294629458578496299",
"113365224892704046405914542481746384359",
"188742528184198787122919520106708977369"
],
"threshold": 0.9
},
"id": "CVE-2023-52469-808d7c86",
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/kv_dpm.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a27d9d9fc9b5564b8904c3a77a7dea482bfa34e",
"digest": {
"function_hash": "37110470598018682755583843537349555804",
"length": 2382.0
},
"id": "CVE-2023-52469-c9fee3f9",
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/kv_dpm.c",
"function": "kv_parse_power_table"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@520e213a0b97b64735a13950e9371e0a5d7a5dc3",
"digest": {
"function_hash": "37110470598018682755583843537349555804",
"length": 2382.0
},
"id": "CVE-2023-52469-e49ff335",
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/pm/powerplay/kv_dpm.c",
"function": "kv_parse_power_table"
}
}
]