CVE-2023-53003
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Mar 27, 2025
Updated: Apr 1, 2025
CWE ID 416
Summary
CVE-2023-53003 is a use-after-free vulnerability affecting the Linux kernel. The issue lies in the EDAC/qcom driver, where llcc_driv_data is passed as edac_device_ctl_info's pvt_info. This memory, allocated by the LLCC driver, is later freed during the qcom_edac driver release. Consequently, when the qcom_edac driver is probed again, it attempts to use the freed data, leading to the vulnerability. To mitigate this issue, instead of passing llcc_driv_data as pvt_info, it is recommended to reference it using the platform_data pointer.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.