CVE-2023-52510: ieee802154: ca8210: Fix a potential UAF in ca8210_probe
In the Linux kernel, the following vulnerability has been resolved:
ieee802154: ca8210: Fix a potential UAF in ca8210probe
If ofclkaddprovider() fails in ca8210registerextclock(), it calls clkunregister() to release priv->clk and returns an error. However, the caller ca8210probe() then calls ca8210remove(), where priv->clk is freed again in ca8210unregisterextclock(). In this case, a use-after-free may happen in the second time we call clkunregister().
Fix this by removing the first clkunregister(). Also, priv->clk could be an error code on failure of clkregisterfixedrate(). Use ISERRORNULL to catch this case in ca8210unregisterextclock().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1 - Compensating control
In the Linux kernel ieee802154 ca8210 driver, remove the first clk_unregister() call in ca8210_register_ext_clock() and use IS_ERR_OR_NULL when checking priv->clk in ca8210_unregister_ext_clock() to prevent the second clk_unregister() from causing a use-after-free.
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52510?
CVE-2023-52510 is categorized with medium severity due to the potential for a use-after-free condition.
How do I fix CVE-2023-52510?
To remediate CVE-2023-52510, ensure that your Linux Kernel version is updated to 5.10.223-1 or later.
Which Linux Kernel versions are affected by CVE-2023-52510?
CVE-2023-52510 impacts Linux Kernel versions from 4.12 up to 6.6-rc5.
What could happen if CVE-2023-52510 is exploited?
Exploitation of CVE-2023-52510 may lead to local privilege escalation or system instability.
Is there a patch available for CVE-2023-52510?
Yes, patches are available in the updates for various Linux Kernel versions, including 6.1.123-1 and 6.12.11-1.