Riskcovery

CVE-2023-53039

HID: intel-ish-hid: ipc: Fix potential use-after-free in work function

State
Published
Severity
7.8 High
Published
May 2, 2025
Updated
Oct 15, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: intel-ish-hid: ipc: Fix potential use-after-free in work function

When a reset notify IPC message is received, the ISR schedules a work function and passes the ISHTP device to it via a global pointer ishtp_dev. If ish_probe() fails, the devm-managed device resources including ishtp_dev are freed, but the work is not cancelled, causing a use-after-free when the work function tries to access ishtp_dev. Use devm_work_autocancel() instead, so that the work is automatically cancelled if probe fails.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ae02e5d40d5f829c589412c6253f925e35cf7a22 to before 8c1d378b8c224fd50247625255f09fc01dcc5836Affected
  • ae02e5d40d5f829c589412c6253f925e35cf7a22 to before 0a594cb490ca6232671fc09e2dc1a0fc7ccbb0b5Affected
  • ae02e5d40d5f829c589412c6253f925e35cf7a22 to before d3ce3afd9f791dd1b7daedfcf8c396b60af5dec0Affected
  • ae02e5d40d5f829c589412c6253f925e35cf7a22 to before 8ae2f2b0a28416ed2f6d8478ac8b9f7862f36785Affected
LinuxLinux
  • 4.9Affected
  • before 4.9Not affected
  • 5.15.105 through 5.15.*Not affected
  • 6.1.22 through 6.1.*Not affected
  • 6.2.9 through 6.2.*Not affected
  • 6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.