CVE-2023-52629

A vulnerability was found in the push-switch driver of Linux Kernel due to improper cleanup sequence in switchdrvremove. Originally, flushwork was placed before timershutdownsync, allowing the worker to potentially be rescheduled in switchtimer and causing a use-after-free bug. Mitigation Red Hat...

CVE-2023-52629

The Linux kernel is vulnerable to a use-after-free bug in the sh: push-switch component due to incorrect ordering of cleanup operations in switch_drv_remove() . Specifically, the original code placed flush_work() before timer_shutdown_sync() , allowing a worker to be rescheduled in switch_timer()...

CVE-2023-52629: Use After Free

In the Linux kernel, the following vulnerability has been resolved: sh: push-switch: Reorder cleanup operations to avoid use-after-free bug The original code puts flushwork before timershutdownsync in switchdrvremove. Although we use flushwork to stop the worker, it could be rescheduled in...