Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2023-52445 Details

Description

In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix use after free on context disconnection Upon module load, a kthread is created targeting the pvr2_context_thread_func function, which may call pvr2_context_destroy and thus call kfree() on the context object. However, that might happen before the usb hub_event handler is able to notify the driver. This patch adds a sanity check before the invalid read reported by syzbot, within the context disconnection call stack.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/2cf0005d315549b8d2b940ff96a66c2a889aa795	kernel.org	Patch
https://git.kernel.org/stable/c/30773ea47d41773f9611ffb4ebc9bda9d19a9e7e	kernel.org	Patch
https://git.kernel.org/stable/c/3233d8bf7893550045682192cb227af7fa3defeb	kernel.org	Patch
https://git.kernel.org/stable/c/437b5f57732bb4cc32cc9f8895d2010ee9ff521c	kernel.org	Patch
https://git.kernel.org/stable/c/47aa8fcd5e8b5563af4042a00f25ba89bef8f33d	kernel.org	Patch
https://git.kernel.org/stable/c/ded85b0c0edd8f45fec88783d7555a5b982449c1	kernel.org	Patch
https://git.kernel.org/stable/c/ec3634ebe23fc3c44ebc67c6d25917300bc68c08	kernel.org	Patch
https://git.kernel.org/stable/c/ec36c134dd020d28e312c2f1766f85525e747aab	kernel.org	Patch
https://git.kernel.org/stable/c/2cf0005d315549b8d2b940ff96a66c2a889aa795	CVE	Patch
https://git.kernel.org/stable/c/30773ea47d41773f9611ffb4ebc9bda9d19a9e7e	CVE	Patch
https://git.kernel.org/stable/c/3233d8bf7893550045682192cb227af7fa3defeb	CVE	Patch
https://git.kernel.org/stable/c/437b5f57732bb4cc32cc9f8895d2010ee9ff521c	CVE	Patch
https://git.kernel.org/stable/c/47aa8fcd5e8b5563af4042a00f25ba89bef8f33d	CVE	Patch
https://git.kernel.org/stable/c/ded85b0c0edd8f45fec88783d7555a5b982449c1	CVE	Patch
https://git.kernel.org/stable/c/ec3634ebe23fc3c44ebc67c6d25917300bc68c08	CVE	Patch
https://git.kernel.org/stable/c/ec36c134dd020d28e312c2f1766f85525e747aab	CVE	Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html	CVE
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html	CVE

see all 18 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-416	Use After Free	[email protected]

Affected Products

Product	Versions
linux linux kernel	< 4.19.306 >= 4.20, < 5.4.268 >= 5.5.0, < 5.10.209 >= 5.11.0, < 5.15.148 >= 5.16.0, < 6.1.75
CPE cpe:2.3:o:linux:linux_kernel:::::::: Remediation No remediation found in references.

Change History

10 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CVE
Nov 4, 2024	CVE Modified	kernel.org
Jun 27, 2024	CVE Modified	kernel.org
Jun 25, 2024	CVE Modified	kernel.org
May 28, 2024	CVE Modified	kernel.org
May 14, 2024	CVE Modified	kernel.org
Mar 14, 2024	Initial Analysis	[email protected]
Feb 22, 2024	New CVE Received	kernel.org