In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: pcie: fix possible NULL pointer dereference
It is possible that iwlpciprobe() will fail and free the trans, then afterwards iwlpciremove() will be called and crash by trying to access trans which is already freed, fix it.
iwlwifi 0000:01:00.0: Detected crf-id 0xa5a5a5a2, cnv-id 0xa5a5a5a2 wfpm id 0xa5a5a5a2 iwlwifi 0000:01:00.0: Can't find a correct rfid for crf id 0x5a2 ... BUG: kernel NULL pointer dereference, address: 0000000000000028 ... RIP: 0010:iwlpciremove+0x12/0x30 [iwlwifi] pcideviceremove+0x3e/0xb0 devicereleasedriverinternal+0x103/0x1f0 driverdetach+0x4c/0x90 busremovedriver+0x5c/0xd0 driverunregister+0x31/0x50 pciunregisterdriver+0x40/0x90 iwlpciunregisterdriver+0x15/0x20 [iwlwifi] _exitcompat+0x9/0x98 [iwlwifi] _x64sysdeletemodule+0x147/0x260
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54053.json"
}