CVE-2023-52510

ieee802154: ca8210: Fix a potential UAF in ca8210_probe

published March 2, 2024

CVSS
—
EPSS
0%
Percentile
14.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ieee802154: ca8210: Fix a potential UAF in ca8210_probe

If of_clk_add_provider() fails in ca8210_register_ext_clock(),

it calls clk_unregister() to release priv->clk and returns an

error. However, the caller ca8210_probe() then calls ca8210_remove(),

where priv->clk is freed again in ca8210_unregister_ext_clock(). In

this case, a use-after-free may happen in the second time we call

clk_unregister().

Fix this by removing the first clk_unregister(). Also, priv->clk could

be an error code on failure of clk_register_fixed_rate(). Use

IS_ERR_OR_NULL to catch this case in ca8210_unregister_ext_clock().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00244 · 14.7th percentile
Published
2024-03-02T21:52Z
EPSS history
Timeline
  • 02 MAR 21:52Z
    ieee802154: ca8210: Fix a potential UAF in ca8210_probe
    cvelistv5