CVE-2023-54326

Linux Kernel Use-After-Free in pci_endpoint_test IRQ Handler

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: misc: pci_endpoint_test: Free IRQs before removing the device In pci_endpoint_test_remove(), freeing the IRQs after removing the device creates a small race window for IRQs to be received with the test device memory already released, causing the IRQ handler to access invalid memory, resulting in an oops. Free the device IRQs before removing the device to avoid this issue.

References (7)

Core 7

Scores

EPSS 0.0017
EPSS Percentile 6.3%

Details

Status published
Products (22)
linux/Kernel 4.19.0 - 4.19.291linux
linux/Kernel 4.20.0 - 5.4.251linux
linux/Kernel 5.11.0 - 5.15.121linux
linux/Kernel 5.16.0 - 6.1.40linux
linux/Kernel 5.5.0 - 5.10.188linux
linux/Kernel 6.2.0 - 6.4.5linux
Linux/Linux < 4.19
Linux/Linux 4.19
Linux/Linux 4.19.291 - 4.19.*
Linux/Linux 5.10.188 - 5.10.*
... and 12 more
Published Dec 30, 2025
Tracked Since Feb 18, 2026