CVE-2023-53069

MEDIUM

Linux Kernel 5.14.1-5.15.105 - Use-After-Free in octeontx2-vf Driver

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: Add missing free for alloc_percpu Add the free_percpu for the allocated "vf->hw.lmt_info" in order to avoid memory leak, same as the "pf->hw.lmt_info" in `drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c`.

References (4)

Core 4

Core References

Patch

https://git.kernel.org/stable/c/90874b76e5f82eaa3309714d72ff2cd8bb8d1b02

Patch

https://git.kernel.org/stable/c/840631bcf21f58c0a3f01378a54d79e9ce86b226

Patch

https://git.kernel.org/stable/c/813b590840771890c738ce6dbfd0c5938a1bafb9

Patch

https://git.kernel.org/stable/c/f038f3917baf04835ba2b7bcf2a04ac93fbf8a9c

Scores

CVSS v3 5.5

EPSS 0.0016

EPSS Percentile 5.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-401

Status published

Products (13)

Linux/Linux < 5.14

Linux/Linux 5.14

Linux/Linux 5.15.105 - 5.15.*

Linux/Linux 5c0512072f6517326d9fba083c4467f173ddd984 - 813b590840771890c738ce6dbfd0c5938a1bafb9

Linux/Linux 5c0512072f6517326d9fba083c4467f173ddd984 - 840631bcf21f58c0a3f01378a54d79e9ce86b226

Linux/Linux 5c0512072f6517326d9fba083c4467f173ddd984 - 90874b76e5f82eaa3309714d72ff2cd8bb8d1b02

Linux/Linux 5c0512072f6517326d9fba083c4467f173ddd984 - f038f3917baf04835ba2b7bcf2a04ac93fbf8a9c

Linux/Linux 6.1.22 - 6.1.*

Linux/Linux 6.2.9 - 6.2.*

Linux/Linux 6.3

... and 3 more

Published May 02, 2025

Tracked Since Feb 18, 2026