CVE-2023-53638CWE-416

CVE-2023-53638

High · published October 7, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
3.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

octeon_ep: cancel queued works in probe error path

If it fails to get the devices's MAC address, octep_probe exits while

leaving the delayed work intr_poll_task queued. When the work later

runs, it's a use after free.

Move the cancelation of intr_poll_task from octep_remove into

octep_device_cleanup. This does not change anything in the octep_remove

flow, but octep_device_cleanup is called also in the octep_probe error

path, where the cancelation is needed.

Note that the cancelation of ctrl_mbox_task has to follow

intr_poll_task's, because the ctrl_mbox_task may be queued by

intr_poll_task.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00139 · 3.0th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-07T20:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 6.4, < 6.4.126.4.12
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (2)
EPSS history
Timeline
  • 07 OCT 15:19Z
    octeon_ep: cancel queued works in probe error path
    cvelistv5