In the Linux kernel, the following vulnerability has been resolved:
cpufreq: davinci: Fix clk use after free
The remove function first frees the clks and only then calls cpufrequnregisterdriver(). If one of the cpufreq callbacks is called just before cpufrequnregisterdriver() is run, the freed clks might be used.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53544.json"
}[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"128050631707454327119399337449926557582",
"142127957700202890293471637899321886192",
"2960193029513938594323274246382136014",
"119273890810126051090761094254969142261",
"99135295411231832856605160498294736780",
"215241915037333811199743450842948077653",
"262028237175878602106609309954303089082",
"18175631536151064452012348130998352863"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a5f024d0e6f91e05c816ad4ee8837173369dd5cb",
"deprecated": false,
"id": "CVE-2023-53544-059191b4",
"signature_type": "Line",
"target": {
"file": "drivers/cpufreq/davinci-cpufreq.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 178.0,
"function_hash": "269986416449768907941053721933987877974"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5d8f384a9b4fc50f6a18405f1c08e5a87a77b5b3",
"deprecated": false,
"id": "CVE-2023-53544-2f5eb6df",
"signature_type": "Function",
"target": {
"function": "davinci_cpufreq_remove",
"file": "drivers/cpufreq/davinci-cpufreq.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 174.0,
"function_hash": "300005667056430789659191865893614766395"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a5f024d0e6f91e05c816ad4ee8837173369dd5cb",
"deprecated": false,
"id": "CVE-2023-53544-7493806a",
"signature_type": "Function",
"target": {
"function": "davinci_cpufreq_remove",
"file": "drivers/cpufreq/davinci-cpufreq.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 174.0,
"function_hash": "300005667056430789659191865893614766395"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ab05ae4ab831f64bbc427592c86f599ed9c4324f",
"deprecated": false,
"id": "CVE-2023-53544-7b05fa52",
"signature_type": "Function",
"target": {
"function": "davinci_cpufreq_remove",
"file": "drivers/cpufreq/davinci-cpufreq.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"128050631707454327119399337449926557582",
"142127957700202890293471637899321886192",
"2960193029513938594323274246382136014",
"119273890810126051090761094254969142261",
"204485924265122454458026723940087763371",
"22773238409450732164051638753796115480",
"305474931387238689911014535101174461699",
"330533225612574704668812166285283140898"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5d8f384a9b4fc50f6a18405f1c08e5a87a77b5b3",
"deprecated": false,
"id": "CVE-2023-53544-85d9b7bf",
"signature_type": "Line",
"target": {
"file": "drivers/cpufreq/davinci-cpufreq.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"128050631707454327119399337449926557582",
"142127957700202890293471637899321886192",
"2960193029513938594323274246382136014",
"119273890810126051090761094254969142261",
"99135295411231832856605160498294736780",
"215241915037333811199743450842948077653",
"262028237175878602106609309954303089082",
"18175631536151064452012348130998352863"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ab05ae4ab831f64bbc427592c86f599ed9c4324f",
"deprecated": false,
"id": "CVE-2023-53544-a31b513d",
"signature_type": "Line",
"target": {
"file": "drivers/cpufreq/davinci-cpufreq.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 174.0,
"function_hash": "300005667056430789659191865893614766395"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66b3bbe6fbd8dd410868e5b53ac3944a934b9310",
"deprecated": false,
"id": "CVE-2023-53544-a595332a",
"signature_type": "Function",
"target": {
"function": "davinci_cpufreq_remove",
"file": "drivers/cpufreq/davinci-cpufreq.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"128050631707454327119399337449926557582",
"142127957700202890293471637899321886192",
"2960193029513938594323274246382136014",
"119273890810126051090761094254969142261",
"99135295411231832856605160498294736780",
"215241915037333811199743450842948077653",
"262028237175878602106609309954303089082",
"18175631536151064452012348130998352863"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66b3bbe6fbd8dd410868e5b53ac3944a934b9310",
"deprecated": false,
"id": "CVE-2023-53544-ac1e971a",
"signature_type": "Line",
"target": {
"file": "drivers/cpufreq/davinci-cpufreq.c"
},
"signature_version": "v1"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53544.json"