CVE-2023-52859

perf: hisi: Fix use-after-free when register pmu fails

published May 21, 2024

CVSS
—
EPSS
0%
Percentile
14.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

perf: hisi: Fix use-after-free when register pmu fails

When we fail to register the uncore pmu, the pmu context may not been

allocated. The error handing will call cpuhp_state_remove_instance()

to call uncore pmu offline callback, which migrate the pmu context.

Since that's liable to lead to some kind of use-after-free.

Use cpuhp_state_remove_instance_nocalls() instead of

cpuhp_state_remove_instance() so that the notifiers don't execute after

the PMU device has been failed to register.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00241 · 14.4th percentile
Published
2024-05-21T15:31Z
EPSS history
Timeline
  • 21 MAY 15:31Z
    perf: hisi: Fix use-after-free when register pmu fails
    cvelistv5