CVE-2023-52973
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Mar 27, 2025
Updated: Apr 1, 2025
CWE ID 416
Summary
CVE-2023-52973 involves a use-after-free (UAF) vulnerability in the Linux kernel's vcs_size function. After a call to console_unlock() in vcs_read(), the vc_data struct can be freed, leading to UAF when vcs_size() is called. Syzkaller discovered this vulnerability and reported it as a KASAN issue. The affected address is located in a 1024-byte kmalloc-1k region and was allocated by task 1191 and freed by task 1548. This vulnerability has been resolved.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.