CVE-2023-53039
Published: May 2, 2025
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Fix potential use-after-free in work function When a reset notify IPC message is received, the ISR schedules a work function and passes the ISHTP device to it via a global pointer ishtp_dev. If ish_probe() fails, the devm-managed device resources including ishtp_dev are freed, but the work is not cancelled, causing a use-after-free when the work function tries to access ishtp_dev. Use devm_work_autocancel() instead, so that the work is automatically cancelled if probe fails.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected ae02e5d40d5f829c589412c6253f925e35cf7a22 - < 8c1d378b8c224fd50247625255f09fc01dcc5836affected ae02e5d40d5f829c589412c6253f925e35cf7a22 - < 0a594cb490ca6232671fc09e2dc1a0fc7ccbb0b5affected ae02e5d40d5f829c589412c6253f925e35cf7a22 - < d3ce3afd9f791dd1b7daedfcf8c396b60af5dec0affected ae02e5d40d5f829c589412c6253f925e35cf7a22 - < 8ae2f2b0a28416ed2f6d8478ac8b9f7862f36785 |
Linux | Linux | affected 4.9unaffected 0 - < 4.9unaffected 5.15.105 - <= 5.15.*unaffected 6.1.22 - <= 6.1.*unaffected 6.2.9 - <= 6.2.*+1 more versions |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now