CVE-2023-53651

MEDIUM

Linux Kernel 4.15-6.1.19, 6.2.0-6.2.2, >=6.3 - Use-After-Free in exc3000 Timer Handling

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: Input: exc3000 - properly stop timer on shutdown We need to stop the timer on driver unbind or probe failures, otherwise we get UAF/Oops.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/526a177ac6353d65057eadb5d6edafc168f64484

Patch

https://git.kernel.org/stable/c/bee57c20fc0ca5ef9b9a53a0335eab2ac9e9cae1

Patch

https://git.kernel.org/stable/c/79c81d137d36f9635bbcbc3916c0cccb418a61dd

Scores

CVSS v3 5.5

EPSS 0.0018

EPSS Percentile 8.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (11)

linux/Kernel 4.15.0 - 6.1.20linux

linux/Kernel 6.2.0 - 6.2.3linux

Linux/Linux < 4.15

Linux/Linux 4.15

Linux/Linux 6.1.20 - 6.1.*

Linux/Linux 6.2.3 - 6.2.*

Linux/Linux 6.3

Linux/Linux 7e577a17f2eefeef32f1106ebf91e7cd143ba654 - 526a177ac6353d65057eadb5d6edafc168f64484

Linux/Linux 7e577a17f2eefeef32f1106ebf91e7cd143ba654 - 79c81d137d36f9635bbcbc3916c0cccb418a61dd

Linux/Linux 7e577a17f2eefeef32f1106ebf91e7cd143ba654 - bee57c20fc0ca5ef9b9a53a0335eab2ac9e9cae1

... and 1 more

Published Oct 07, 2025

Tracked Since Feb 18, 2026