CVE-2023-52445

media: pvrusb2: fix use after free on context disconnection

State: Published
Severity: Not scored
Published: Feb 22, 2024
Updated: May 11, 2026
Reserved: Feb 20, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

media: pvrusb2: fix use after free on context disconnection

Upon module load, a kthread is created targeting the pvr2_context_thread_func function, which may call pvr2_context_destroy and thus call kfree() on the context object. However, that might happen before the usb hub_event handler is able to notify the driver. This patch adds a sanity check before the invalid read reported by syzbot, within the context disconnection call stack.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e5be15c63804e05b5a94197524023702a259e308 to before ec36c134dd020d28e312c2f1766f85525e747aabAffected e5be15c63804e05b5a94197524023702a259e308 to before 47aa8fcd5e8b5563af4042a00f25ba89bef8f33dAffected e5be15c63804e05b5a94197524023702a259e308 to before 3233d8bf7893550045682192cb227af7fa3defebAffected e5be15c63804e05b5a94197524023702a259e308 to before ec3634ebe23fc3c44ebc67c6d25917300bc68c08Affected e5be15c63804e05b5a94197524023702a259e308 to before 30773ea47d41773f9611ffb4ebc9bda9d19a9e7eAffected e5be15c63804e05b5a94197524023702a259e308 to before 2cf0005d315549b8d2b940ff96a66c2a889aa795Affected e5be15c63804e05b5a94197524023702a259e308 to before 437b5f57732bb4cc32cc9f8895d2010ee9ff521cAffected e5be15c63804e05b5a94197524023702a259e308 to before ded85b0c0edd8f45fec88783d7555a5b982449c1Affected
LinuxLinux	2.6.26Affected before 2.6.26Not affected 4.19.306 through 4.19.Not affected 5.4.268 through 5.4.Not affected 5.10.209 through 5.10.Not affected 5.15.148 through 5.15.Not affected 6.1.75 through 6.1.Not affected 6.6.14 through 6.6.Not affected 6.7.2 through 6.7.*Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

e5be15c63804e05b5a94197524023702a259e308 to before ec36c134dd020d28e312c2f1766f85525e747aabAffected
e5be15c63804e05b5a94197524023702a259e308 to before 47aa8fcd5e8b5563af4042a00f25ba89bef8f33dAffected
e5be15c63804e05b5a94197524023702a259e308 to before 3233d8bf7893550045682192cb227af7fa3defebAffected
e5be15c63804e05b5a94197524023702a259e308 to before ec3634ebe23fc3c44ebc67c6d25917300bc68c08Affected
e5be15c63804e05b5a94197524023702a259e308 to before 30773ea47d41773f9611ffb4ebc9bda9d19a9e7eAffected
e5be15c63804e05b5a94197524023702a259e308 to before 2cf0005d315549b8d2b940ff96a66c2a889aa795Affected
e5be15c63804e05b5a94197524023702a259e308 to before 437b5f57732bb4cc32cc9f8895d2010ee9ff521cAffected
e5be15c63804e05b5a94197524023702a259e308 to before ded85b0c0edd8f45fec88783d7555a5b982449c1Affected

LinuxLinux

2.6.26Affected
before 2.6.26Not affected
4.19.306 through 4.19.*Not affected
5.4.268 through 5.4.*Not affected
5.10.209 through 5.10.*Not affected
5.15.148 through 5.15.*Not affected
6.1.75 through 6.1.*Not affected
6.6.14 through 6.6.*Not affected
6.7.2 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.