https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 01:01:44 +0000 https://vulnerability.circl.lu/vuln/cve-2023-53219 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>media: netup_unidvb: fix use-after-free at del_timer()</p> <p>When Universal DVB card is detaching, netup_unidvb_dma_fini() uses del_timer() to stop dma-&gt;timeout timer. But when timer handler netup_unidvb_dma_timeout() is running, del_timer() could not stop it. As a result, the use-after-free bug could happen. The process is shown below:</p> <p>(cleanup routine) | (timer routine) | mod_timer(&amp;dev-&gt;tx_sim_timer, ..) netup_unidvb_finidev() | (wait a time) netup_unidvb_dma_fini() | netup_unidvb_dma_timeout() del_timer(&amp;dma-&gt;timeout); | | ndev-&gt;pci_dev-&gt;dev //USE</p> <p>Fix by changing del_timer() to del_timer_sync().</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>media: netup_unidvb: fix use-after-free at del_timer()</p> <p>When Universal DVB card is detaching, netup_unidvb_dma_fini() uses del_timer() to stop dma-&gt;timeout timer. But when timer handler netup_unidvb_dma_timeout() is running, del_timer() could not stop it. As a result, the use-after-free bug could happen. The process is shown below:</p> <p>(cleanup routine) | (timer routine) | mod_timer(&amp;dev-&gt;tx_sim_timer, ..) netup_unidvb_finidev() | (wait a time) netup_unidvb_dma_fini() | netup_unidvb_dma_timeout() del_timer(&amp;dma-&gt;timeout); | | ndev-&gt;pci_dev-&gt;dev //USE</p> <p>Fix by changing del_timer() to del_timer_sync().</p> https://vulnerability.circl.lu/vuln/cve-2023-53219