Ring-Buffer Vulnerability in Linux Kernel by Open Source

CVE-2023-53587

What is CVE-2023-53587?

A vulnerability in the Linux kernel's ring-buffer mechanism may allow for unsafe operations during the destruction phase of the buffer. If data is written to the buffer right before its destruction, the system may attempt to execute a synchronization IRQ work after the buffer has already been freed. This scenario can lead to a use-after-free condition, potentially causing system crashes or unexpected behavior, as indicated by a KASAN report observed in a special environment setup. The proper implementation of irq_work_sync() is essential to ensure that IRQ work completes before any buffer destruction occurs, thus preventing such critical scenarios.

References