CVE-2023-53800

In the Linux kernel, the following vulnerability has been resolved: ubi: Fix use-after-free when volume resizing failed There is an use-after-free problem reported by KASAN: ================================================================== BUG: KASAN: use-after-free in ubiebacopytable+0x11f/0x1c...

CVE-2023-53800

The CVE-2023-53800 issue is in the Linux kernel ubi driver (ubi_eba_copy_table/ubi_resize_volume). It describes a use-after-free when a volume resize fails: new_eba_tbl is freed on error, but vol->eba_tbl still holds it, creating a lifecycle mismatch that can cause a use-after-free on subseque...