https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 02:58:09 +0000 https://vulnerability.circl.lu/vuln/cve-2023-53479 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>cxl/acpi: Fix a use-after-free in cxl_parse_cfmws()</p> <p>KASAN and KFENCE detected an user-after-free in the CXL driver. This happens in the cxl_decoder_add() fail path. KASAN prints the following error:</p> <p>BUG: KASAN: slab-use-after-free in cxl_parse_cfmws (drivers/cxl/acpi.c:299)</p> <p>This happens in cxl_parse_cfmws(), where put_device() is called, releasing cxld, which is accessed later.</p> <p>Use the local variables in the dev_err() instead of pointing to the released memory. Since the dev_err() is printing a resource, change the open coded print format to use the %pr format specifier.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>cxl/acpi: Fix a use-after-free in cxl_parse_cfmws()</p> <p>KASAN and KFENCE detected an user-after-free in the CXL driver. This happens in the cxl_decoder_add() fail path. KASAN prints the following error:</p> <p>BUG: KASAN: slab-use-after-free in cxl_parse_cfmws (drivers/cxl/acpi.c:299)</p> <p>This happens in cxl_parse_cfmws(), where put_device() is called, releasing cxld, which is accessed later.</p> <p>Use the local variables in the dev_err() instead of pointing to the released memory. Since the dev_err() is printing a resource, change the open coded print format to use the %pr format specifier.</p> https://vulnerability.circl.lu/vuln/cve-2023-53479