7.8

CVE-2023-52469

drivers/amd/pm: fix a use-after-free in kv_parse_power_table

In the Linux kernel, the following vulnerability has been resolved:

drivers/amd/pm: fix a use-after-free in kv_parse_power_table

When ps allocated by kzalloc equals to NULL, kv_parse_power_table
frees adev->pm.dpm.ps that allocated before. However, after the control
flow goes through the following call chains:

kv_parse_power_table
  |-> kv_dpm_init
        |-> kv_dpm_sw_init
	      |-> kv_dpm_fini

The adev->pm.dpm.ps is used in the for loop of kv_dpm_fini after its
first free in kv_parse_power_table and causes a use-after-free bug.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.2.0 < 4.19.306
Linux ≫ Linux Kernel Version >= 4.20.0 < 5.4.268
Linux ≫ Linux Kernel Version >= 5.5.0 < 5.10.209
Linux ≫ Linux Kernel Version >= 5.11.0 < 5.15.148
Linux ≫ Linux Kernel Version >= 5.16.0 < 6.1.75
Linux ≫ Linux Kernel Version >= 6.2.0 < 6.6.14
Linux ≫ Linux Kernel Version >= 6.7.0 < 6.7.2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.29% 0.206
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html
https://git.kernel.org/stable/c/28dd788382c43b330480f57cd34cde0840896743
Patch
https://git.kernel.org/stable/c/3426f059eacc33ecc676b0d66539297e1cfafd02
Patch
https://git.kernel.org/stable/c/35fa2394d26e919f63600ce631e6aefc95ec2706
Patch
https://git.kernel.org/stable/c/520e213a0b97b64735a13950e9371e0a5d7a5dc3
Patch
https://git.kernel.org/stable/c/8a27d9d9fc9b5564b8904c3a77a7dea482bfa34e
Patch
https://git.kernel.org/stable/c/8b55b06e737feb2a645b0293ea27e38418876d63
Patch
https://git.kernel.org/stable/c/95084632a65d5c0d682a83b55935560bdcd2a1e3
Patch
https://git.kernel.org/stable/c/b6dcba02ee178282e0d28684d241e0b8462dea6a
Patch