Description

In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix use after free in vhost_vdpa_probe() The put_device() calls vhost_vdpa_release_dev() which calls ida_simple_remove() and frees "v". So this call to ida_simple_remove() is a use after free and a double free.

INFO

Published Date :

2024-05-21T15:31:09.623Z

Last Modified :

2025-05-04T07:43:20.364Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2023-52795 vulnerability.

Vendors Products
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2023-52795.

URL Resource
https://git.kernel.org/stable/c/ae8ea4e200675a940c365b496ef8e3fb4123601c cve-icon cve-icon
https://git.kernel.org/stable/c/bf04132cd64ccde4e9e9765d489c83fe83c09b7f cve-icon cve-icon
https://git.kernel.org/stable/c/c0f8b8fb7df9d1a38652eb5aa817afccd3c56111 cve-icon cve-icon
https://git.kernel.org/stable/c/e07754e0a1ea2d63fb29574253d1fd7405607343 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024052157-CVE-2023-52795-4811@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-52795 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-52795 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact