Use-After-Free Issue in MediaTek Drivers Affecting Linux Kernel

CVE-2023-53854

What is CVE-2023-53854?

A use-after-free vulnerability has been identified in the MediaTek MT8186 audio driver within the Linux kernel. This issue stems from improper handling of resource deallocation in the driver removal path, particularly due to incorrect sequencing of cleanup calls. When the driver is removed, specific cleanup functions were called in the wrong order, leading to potential memory access violations and leaks. This vulnerability can impact system stability and security, emphasizing the importance of correctly utilizing resource management functions in driver development.

References