Use After Free Vulnerability in Linux Kernel's Virtual Console Driver

CVE-2023-53747

What is CVE-2023-53747?

A vulnerability in the Linux kernel's virtual console driver presents a use after free (UAF) issue. This arises when a struct vc_data pointer can be freed by the vc_port_destruct function after a console unlock operation in the vcs_write function. Subsequent calls to vcs_size could then access this freed memory, leading to potentially unpredictable behavior or system crashes. This issue was identified through the Syzkaller fuzzer and demands prompt attention to maintain system integrity.

References