CVE-2023-54270: media: usb: siano: Fix use after free bugs caused by do_submit_urb

Q: What is the severity of CVE-2023-54270?

CVE-2023-54270 has a medium severity due to the potential for use-after-free vulnerabilities in the Linux kernel.

Q: How do I fix CVE-2023-54270?

To fix CVE-2023-54270, update your Linux kernel to version 6.2.0-rc4 or later.

Q: What systems are affected by CVE-2023-54270?

CVE-2023-54270 affects the Linux kernel versions up to 6.2.0-rc3.

Q: What is the impact of CVE-2023-54270?

The impact of CVE-2023-54270 includes potential crashes or arbitrary code execution on affected systems.

Q: Who should be concerned about CVE-2023-54270?

Users and administrators of systems running affected versions of the Linux kernel should be concerned about CVE-2023-54270.

Published Dec 30, 2025

Updated

In the Linux kernel, the following vulnerability has been resolved:

media: usb: siano: Fix use after free bugs caused by dosubmiturb

There are UAF bugs caused by dosubmiturb(). One of the KASan reports is shown below:

[ 36.403605] BUG: KASAN: use-after-free in workerthread+0x4a2/0x890 [ 36.406105] Read of size 8 at addr ffff8880059600e8 by task kworker/0:2/49 [ 36.408316] [ 36.408867] CPU: 0 PID: 49 Comm: kworker/0:2 Not tainted 6.2.0-rc3-15798-g5a41237ad1d4-dir8 [ 36.411696] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g15584 [ 36.416157] Workqueue: 0x0 (events) [ 36.417654] Call Trace: [ 36.418546] <TASK> [ 36.419320] dumpstacklvl+0x96/0xd0 [ 36.420522] printaddressdescription+0x75/0x350 [ 36.421992] printreport+0x11b/0x250 [ 36.423174] ? rawspinlockirqsave+0x87/0xd0 [ 36.424806] ? virtaddrvalid+0xcf/0x170 [ 36.426069] ? workerthread+0x4a2/0x890 [ 36.427355] kasanreport+0x131/0x160 [ 36.428556] ? workerthread+0x4a2/0x890 [ 36.430053] workerthread+0x4a2/0x890 [ 36.431297] ? workerclrflags+0x90/0x90 [ 36.432479] kthread+0x166/0x190 [ 36.433493] ? kthreadblkcg+0x50/0x50 [ 36.434669] retfromfork+0x22/0x30 [ 36.435923] </TASK> [ 36.436684] [ 36.437215] Allocated by task 24: [ 36.438289] kasansettrack+0x50/0x80 [ 36.439436] kasankmalloc+0x89/0xa0 [ 36.440566] smsusbprobe+0x374/0xc90 [ 36.441920] usbprobeinterface+0x2d1/0x4c0 [ 36.443253] reallyprobe+0x1d5/0x580 [ 36.444539] driverprobedevice+0xe3/0x130 [ 36.446085] driverprobedevice+0x49/0x220 [ 36.447423] deviceattachdriver+0x19e/0x1b0 [ 36.448931] busforeachdrv+0xcb/0x110 [ 36.450217] deviceattach+0x132/0x1f0 [ 36.451470] busprobedevice+0x59/0xf0 [ 36.452563] deviceadd+0x4ec/0x7b0 [ 36.453830] usbsetconfiguration+0xc63/0xe10 [ 36.455230] usbgenericdriverprobe+0x3b/0x80 [ 36.456166] printk: console [ttyGS0] disabled [ 36.456569] usbprobedevice+0x90/0x110 [ 36.459523] reallyprobe+0x1d5/0x580 [ 36.461027] driverprobedevice+0xe3/0x130 [ 36.462465] driverprobedevice+0x49/0x220 [ 36.463847] deviceattachdriver+0x19e/0x1b0 [ 36.465229] busforeachdrv+0xcb/0x110 [ 36.466466] deviceattach+0x132/0x1f0 [ 36.467799] busprobedevice+0x59/0xf0 [ 36.469010] deviceadd+0x4ec/0x7b0 [ 36.470125] usbnewdevice+0x863/0xa00 [ 36.471374] hubevent+0x18c7/0x2220 [ 36.472746] processonework+0x34c/0x5b0 [ 36.474041] workerthread+0x4b7/0x890 [ 36.475216] kthread+0x166/0x190 [ 36.476267] retfromfork+0x22/0x30 [ 36.477447] [ 36.478160] Freed by task 24: [ 36.479239] kasansettrack+0x50/0x80 [ 36.480512] kasansavefreeinfo+0x2b/0x40 [ 36.481808] kasanslabfree+0x122/0x1a0 [ 36.483173] kmemcachefree+0xc4/0x200 [ 36.484563] smsusbtermdevice+0xcd/0xf0 [ 36.485896] smsusbprobe+0xc85/0xc90 [ 36.486976] usbprobeinterface+0x2d1/0x4c0 [ 36.488303] reallyprobe+0x1d5/0x580 [ 36.489498] driverprobedevice+0xe3/0x130 [ 36.491140] driverprobedevice+0x49/0x220 [ 36.492475] deviceattachdriver+0x19e/0x1b0 [ 36.493988] busforeachdrv+0xcb/0x110 [ 36.495171] deviceattach+0x132/0x1f0 [ 36.496617] busprobedevice+0x59/0xf0 [ 36.497875] deviceadd+0x4ec/0x7b0 [ 36.498972] usbsetconfiguration+0xc63/0xe10 [ 36.500264] usbgenericdriverprobe+0x3b/0x80 [ 36.501740] usbprobedevice+0x90/0x110 [ 36.503084] reallyprobe+0x1d5/0x580 [ 36.504241] driverprobedevice+0xe3/0x130 [ 36.505548] driverprobedevice+0x49/0x220 [ 36.506766] deviceattachdriver+0x19e/0x1b0 [ 36.508368] busforeachdrv+0xcb/0x110 [ 36.509646] deviceattach+0x132/0x1f0 [ 36.510911] busprobedevice+0x59/0xf0 [ 36.512103] deviceadd+0x4ec/0x7b0 [ 36.513215] usbnewdevice+0x863/0xa00 [ 36.514736] hubevent+0x18c7/0x2220 [ 36.516130] processonework+ ---truncated---

Affected Software

164 affected componentsFixes available

linux_kernel=6.2.0-rc3

ubuntu/linux-azure<4.15.0-1175.190~14.04.1

4.15.0-1175.190~14.04.1

ubuntu/linux-aws-hwe<4.15.0-1166.179~16.04.1

4.15.0-1166.179~16.04.1

ubuntu/linux-azure<4.15.0-1175.190~16.04.1

4.15.0-1175.190~16.04.1

ubuntu/linux-gcp<4.15.0-1160.177~16.04.1

4.15.0-1160.177~16.04.1

ubuntu/linux-hwe<4.15.0-223.235~16.04.1

4.15.0-223.235~16.04.1

ubuntu/linux-oracle<4.15.0-1129.140~16.04.1

4.15.0-1129.140~16.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux<4.15.0-223.235

4.15.0-223.235

ubuntu/linux-aws<4.15.0-1166.179

4.15.0-1166.179

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-aws-5.4<5.4.0-1104.112~18.04.1

5.4.0-1104.112~18.04.1

ubuntu/linux-azure*

ubuntu/linux-azure-4.15<4.15.0-1175.190

4.15.0-1175.190

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-5.4<5.4.0-1110.116~18.04.1

5.4.0-1110.116~18.04.1

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-4.15<4.15.0-1160.177

4.15.0-1160.177

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-5.4<5.4.0-1107.116~18.04.1

5.4.0-1107.116~18.04.1

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-5.4<5.4.0-152.169~18.04.1

5.4.0-152.169~18.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-ibm-5.4<5.4.0-1051.56~18.04.1

5.4.0-1051.56~18.04.1

ubuntu/linux-kvm<4.15.0-1150.155

4.15.0-1150.155

ubuntu/linux-oem*

ubuntu/linux-oracle<4.15.0-1129.140

4.15.0-1129.140

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-oracle-5.4<5.4.0-1103.112~18.04.1

5.4.0-1103.112~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1088.99~18.04.1

5.4.0-1088.99~18.04.1

ubuntu/linux-aws-fips<4.15.0-2105.111

4.15.0-2105.111

ubuntu/linux-azure-fips<4.15.0-2084.90

4.15.0-2084.90

ubuntu/linux-fips<4.15.0-1121.132

4.15.0-1121.132

ubuntu/linux-gcp-fips<4.15.0-2068.73

4.15.0-2068.73

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.4.0-152.169

5.4.0-152.169

ubuntu/linux-aws<5.4.0-1104.112

5.4.0-1104.112

ubuntu/linux-aws-5.15<5.15.0-1038.43~20.04.1

5.15.0-1038.43~20.04.1

ubuntu/linux-azure<5.4.0-1110.116

5.4.0-1110.116

ubuntu/linux-azure-5.15<5.15.0-1040.47~20.04.1

5.15.0-1040.47~20.04.1

ubuntu/linux-bluefield<5.4.0-1065.71

5.4.0-1065.71

ubuntu/linux-gcp<5.4.0-1107.116

5.4.0-1107.116

ubuntu/linux-gcp-5.15<5.15.0-1036.44~20.04.1

5.15.0-1036.44~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-75.82~20.04.1

5.15.0-75.82~20.04.1

ubuntu/linux-ibm<5.4.0-1051.56

5.4.0-1051.56

ubuntu/linux-intel-iotg-5.15<5.15.0-1033.38~20.04.1

5.15.0-1033.38~20.04.1

ubuntu/linux-iot<5.4.0-1017.18

5.4.0-1017.18

ubuntu/linux-kvm<5.4.0-1093.99

5.4.0-1093.99

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-75.82~20.04.1

5.15.0-75.82~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1015.15~20.04.1

5.15.0-1015.15~20.04.1

ubuntu/linux-oracle<5.4.0-1103.112

5.4.0-1103.112

ubuntu/linux-oracle-5.15<5.15.0-1037.43~20.04.1

5.15.0-1037.43~20.04.1

ubuntu/linux-raspi<5.4.0-1088.99

5.4.0-1088.99

ubuntu/linux-riscv-5.15<5.15.0-1035.39~20.04.1

5.15.0-1035.39~20.04.1

ubuntu/linux-xilinx-zynqmp<5.4.0-1024.28

5.4.0-1024.28

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-aws-fips<5.4.0-1104.112+fips1

5.4.0-1104.112+fips1

ubuntu/linux-azure-fips<5.4.0-1110.116+fips1

5.4.0-1110.116+fips1

ubuntu/linux-fips<5.4.0-1079.88

5.4.0-1079.88

ubuntu/linux-gcp-fips<5.4.0-1107.116+fips1

5.4.0-1107.116+fips1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.15.0-75.82

5.15.0-75.82

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1038.43

5.15.0-1038.43

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-azure<5.15.0-1040.47

5.15.0-1040.47

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-fde<5.15.0-1041.48.1

5.15.0-1041.48.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1036.44

5.15.0-1036.44

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gke<5.15.0-1036.41

5.15.0-1036.41

ubuntu/linux-gkeop<5.15.0-1022.27

5.15.0-1022.27

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-ibm<5.15.0-1032.35

5.15.0-1032.35

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-intel-iotg<5.15.0-1033.38

5.15.0-1033.38

ubuntu/linux-kvm<5.15.0-1035.40

5.15.0-1035.40

ubuntu/linux-lowlatency<5.15.0-75.82

5.15.0-75.82

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-nvidia<5.15.0-1027.27

5.15.0-1027.27

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-nvidia-tegra<5.15.0-1015.15

5.15.0-1015.15

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1037.43

5.15.0-1037.43

ubuntu/linux-oracle-6.5*

ubuntu/linux-raspi<5.15.0-1032.35

5.15.0-1032.35

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-bluefield<5.15.0-1019.21

5.15.0-1019.21

ubuntu/linux-intel-iot-realtime<5.15.0-1033.35

5.15.0-1033.35

ubuntu/linux-realtime<5.15.0-1040.45

5.15.0-1040.45

ubuntu/linux-fips*

ubuntu/linux-azure-6.11*

ubuntu/linux-gcp-6.11*

ubuntu/linux-hwe-6.11*

ubuntu/linux-lowlatency-hwe-6.11*

ubuntu/linux-nvidia-6.11*

ubuntu/linux-oem-6.11*

ubuntu/linux-oem-6.8*

ubuntu/linux-raspi-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-6.14*

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1175.190~14.04.1
Upgrade
Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-1166.179~16.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1175.190~16.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.15.0-1160.177~16.04.1
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-223.235~16.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1129.140~16.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.15.0-223.235
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.15.0-1166.179
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1104.112~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1175.190
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1110.116~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1160.177
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1107.116~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-152.169~18.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1051.56~18.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.15.0-1150.155
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1129.140
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1103.112~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1088.99~18.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2105.111
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2084.90
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-1121.132
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2068.73
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-152.169
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1104.112
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1038.43~20.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1110.116
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1040.47~20.04.1
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1065.71
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1107.116
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1036.44~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-75.82~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1051.56
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1033.38~20.04.1
Upgrade
Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.
Fixed in 5.4.0-1017.18
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1093.99
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-75.82~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1015.15~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1103.112
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1037.43~20.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1088.99
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1035.39~20.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.4.0-1024.28
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1104.112+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1110.116+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1079.88
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1107.116+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-75.82
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1038.43
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1040.47
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1041.48.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1036.44
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1036.41
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1022.27
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1032.35
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1033.38
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1035.40
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-75.82
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1027.27
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1015.15
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1037.43
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1032.35
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1019.21
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1033.35
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1040.45

Event History

Dec 30, 2025

CVE Published

via MITRE·12:16 PM

Data Sourced

via MITRE·12:16 PM

Description

Data Sourced

via OSV·01:16 PM

DescriptionSeverityAffected Software

Data Sourced

via NVD·01:16 PM

Description

Frequently Asked Questions

What is the severity of CVE-2023-54270?

CVE-2023-54270 has a medium severity due to the potential for use-after-free vulnerabilities in the Linux kernel.

How do I fix CVE-2023-54270?

To fix CVE-2023-54270, update your Linux kernel to version 6.2.0-rc4 or later.

What systems are affected by CVE-2023-54270?

CVE-2023-54270 affects the Linux kernel versions up to 6.2.0-rc3.

What is the impact of CVE-2023-54270?

The impact of CVE-2023-54270 includes potential crashes or arbitrary code execution on affected systems.

Who should be concerned about CVE-2023-54270?

Users and administrators of systems running affected versions of the Linux kernel should be concerned about CVE-2023-54270.

CVE-2023-54270: media: usb: siano: Fix use after free bugs caused by do_submit_urb

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the severity of CVE-2023-54270?

How do I fix CVE-2023-54270?

What systems are affected by CVE-2023-54270?

What is the impact of CVE-2023-54270?

Who should be concerned about CVE-2023-54270?

Company

Resources

Contact