CVE-2023-52983
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Mar 27, 2025
Updated: Apr 1, 2025
CWE ID 416
Summary
CVE-2023-52983 is a Linux kernel vulnerability that put user after free (UAF) at risk in the bfq (Budget Fair Queuing) block scheduler. Specifically, in some contexts, bic->bfqq would be freed and then bic_set_bfqq() would be called with the freed bic->bfqq. This issue was resolved by ensuring that bfqq is always freed before calling bic_set_bfqq(). Prior to this patch, an attacker could potentially exploit this UAF vulnerability to execute arbitrary code or cause a denial-of-service condition.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX