CVE-2023-54015

CVE-2023-54015: In the Linux kernel, the mlx5_devcom_register_device allocation flow could cause a use-after-free. If devcom allocation fails, the code frees priv, but priv might belong to another thread, risking use-after-free. The fix frees priv only when it was allocated by the running thread,...

CVE-2023-54015 net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Devcom, fix error flow in mlx5devcomregisterdevice In case devcom allocation is failed, mlx5 is always freeing the priv. However, this priv might have been allocated by a different thread, and freeing it might lead to...