CVE-2023-54244: ACPI: EC: Fix oops when removing custom query handlers
In the Linux kernel, the following vulnerability has been resolved:
ACPI: EC: Fix oops when removing custom query handlers
When removing custom query handlers, the handler might still be used inside the EC query workqueue, causing a kernel oops if the module holding the callback function was already unloaded.
Fix this by flushing the EC query workqueue when removing custom query handlers.
Tested on a Acer Travelmate 4002WLMi
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Operational
When removing custom EC query handlers, flush the EC query workqueue so the handler cannot still be used after removal (e.g., when the module holding the callback has already been unloaded).
Event History
Frequently Asked Questions
What is the severity of CVE-2023-54244?
CVE-2023-54244 is classified as a medium-severity vulnerability in the Linux kernel.
How do I fix CVE-2023-54244?
To fix CVE-2023-54244, update to the latest stable version of the Linux kernel where the issue has been resolved.
What systems are affected by CVE-2023-54244?
CVE-2023-54244 affects various versions of the Linux kernel that utilize the ACPI subsystem.
What type of vulnerability is CVE-2023-54244?
CVE-2023-54244 is a vulnerability related to the management of custom query handlers in the ACPI subsystem.
What can happen if CVE-2023-54244 is exploited?
Exploitation of CVE-2023-54244 can lead to a kernel oops, potentially causing system instability or crashes.