In the Linux kernel, the following vulnerability has been resolved:
perf: hisi: Fix use-after-free when register pmu fails
When we fail to register the uncore pmu, the pmu context may not been allocated. The error handing will call cpuhpstateremove_instance() to call uncore pmu offline callback, which migrate the pmu context. Since that's liable to lead to some kind of use-after-free.
Use cpuhpstateremoveinstancenocalls() instead of cpuhpstateremove_instance() so that the notifiers don't execute after the PMU device has been failed to register.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52859.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52859.json"
[
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3405f364f82d4f5407a8b4c519dc15d24b847fda",
"digest": {
"line_hashes": [
"317508822998760000082028456267847551884",
"121056668373399858919765859455033505306",
"308512263145817830994396709267885874066",
"271182343199059965137303066992961107241",
"1804128790279108481794307427086941557"
],
"threshold": 0.9
},
"id": "CVE-2023-52859-04a1954f",
"deprecated": false,
"target": {
"file": "drivers/perf/hisilicon/hisi_uncore_pa_pmu.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3405f364f82d4f5407a8b4c519dc15d24b847fda",
"digest": {
"line_hashes": [
"340159765205851963293008564319245340279",
"101719436715710787985895008534051686712",
"235371965645719806232236585716460286217",
"228411599470516441975333756621849443188",
"76126466240540131413834109342959121436"
],
"threshold": 0.9
},
"id": "CVE-2023-52859-b945763a",
"deprecated": false,
"target": {
"file": "drivers/perf/hisilicon/hisi_uncore_sllc_pmu.c"
}
}
]