CVE-2023-54083

Linux Kernel 5.7.0-5.10.187, 5.11.0-5.15.120, 5.16.0-6.1.38, 6.2.0-6.4.3 - Use-After-Free in USB-PHY Device Reference

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Clear the driver reference in usb-phy dev For the dual-role port, it will assign the phy dev to usb-phy dev and use the port dev driver as the dev driver of usb-phy. When we try to destroy the port dev, it will destroy its dev driver as well. But we did not remove the reference from usb-phy dev. This might cause the use-after-free issue in KASAN.

References (5)

Core 5

Scores

EPSS 0.0018
EPSS Percentile 8.1%

Details

Status published
Products (16)
linux/Kernel 5.11.0 - 5.15.121linux
linux/Kernel 5.16.0 - 6.1.39linux
linux/Kernel 5.7.0 - 5.10.188linux
linux/Kernel 6.2.0 - 6.4.4linux
Linux/Linux < 5.7
Linux/Linux 5.10.188 - 5.10.*
Linux/Linux 5.15.121 - 5.15.*
Linux/Linux 5.7
Linux/Linux 6.1.39 - 6.1.*
Linux/Linux 6.4.4 - 6.4.*
... and 6 more
Published Dec 24, 2025
Tracked Since Feb 18, 2026