CVE Database
/

CVE-2023-53039

Back to search

CVE-2023-53039

Published: May 2, 2025

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Fix potential use-after-free in work function When a reset notify IPC message is received, the ISR schedules a work function and passes the ISHTP device to it via a global pointer ishtp_dev. If ish_probe() fails, the devm-managed device resources including ishtp_dev are freed, but the work is not cancelled, causing a use-after-free when the work function tries to access ishtp_dev. Use devm_work_autocancel() instead, so that the work is automatically cancelled if probe fails.

VendorProductVersions

Linux

Linux

affected
ae02e5d40d5f829c589412c6253f925e35cf7a22 - < 8c1d378b8c224fd50247625255f09fc01dcc5836
affected
ae02e5d40d5f829c589412c6253f925e35cf7a22 - < 0a594cb490ca6232671fc09e2dc1a0fc7ccbb0b5
affected
ae02e5d40d5f829c589412c6253f925e35cf7a22 - < d3ce3afd9f791dd1b7daedfcf8c396b60af5dec0
affected
ae02e5d40d5f829c589412c6253f925e35cf7a22 - < 8ae2f2b0a28416ed2f6d8478ac8b9f7862f36785

Linux

Linux

affected
4.9
unaffected
0 - < 4.9
unaffected
5.15.105 - <= 5.15.*
unaffected
6.1.22 - <= 6.1.*
unaffected
6.2.9 - <= 6.2.*

+1 more versions

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now
CVE-2023-53039 - Security Vulnerability | QwikSec