CVE-2023-52584
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
spmi: mediatek: Fix UAF on device remove
In the Linux kernel, the following vulnerability has been resolved: spmi: mediatek: Fix UAF on device remove The pmif driver data that contains the clocks is allocated along with spmi_controller. On device remove, spmi_controller will be freed first, and then devres , including the clocks, will be cleanup. This leads to UAF because putting the clocks will access the clocks in the pmif driver data, which is already freed along with spmi_controller. This can be reproduced by enabling DEBUG_TEST_DRIVER_REMOVE and building the kernel with KASAN. Fix the UAF issue by using unmanaged clk_bulk_get() and putting the clocks before freeing spmi_controller.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| b45b3ccef8c063d21eb746d85337eaf71f6b5f07 | affected | git | 521f28eedd6b14228c46e3b81e3bf9b90c2818d8 | Unavailable | None listed |
| b45b3ccef8c063d21eb746d85337eaf71f6b5f07 | affected | git | f8dcafcb54632536684336161da8bdd52120f95e | Unavailable | None listed |
| b45b3ccef8c063d21eb746d85337eaf71f6b5f07 | affected | git | 9a3881b1f07db1bb55cb0108e6f05cfd027eaf2e | Unavailable | None listed |
| b45b3ccef8c063d21eb746d85337eaf71f6b5f07 | affected | git | e821d50ab5b956ed0effa49faaf29912fd4106d9 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 5.17 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 5.17 | Unavailable | None listed |
| 6.1.77 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.16 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.7.4 | unaffected | semver | Unavailable | 6.7.* | None listed |
| 6.8 | unaffected | original_commit_for_fix | Unavailable | * | None listed |