Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: cpufreq: davinci: Fix clk use after free The remove function first frees the clks and only then calls cpufreq_unregister_driver(). If one of the cpufreq callbacks is called just before cpufreq_unregister_driver() is run, the freed clks might be used.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 2.6.33, < 4.14.308 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/5d8f384a9b4fc50f6a18405f1c08e5a87a77b5b3Patch
- https://git.kernel.org/stable/c/66b3bbe6fbd8dd410868e5b53ac3944a934b9310Patch
- https://git.kernel.org/stable/c/a5f024d0e6f91e05c816ad4ee8837173369dd5cbPatch
- https://git.kernel.org/stable/c/ab05ae4ab831f64bbc427592c86f599ed9c4324fPatch
FAQ
What is CVE-2023-53544?
CVE-2023-53544 is a vulnerability with a CVSS score of 7.8 (HIGH). In the Linux kernel, the following vulnerability has been resolved: cpufreq: davinci: Fix clk use after free The remove function first frees the clks and only then calls cpufreq_unregister_driver()....
How severe is CVE-2023-53544?
CVE-2023-53544 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-53544?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.