Use After Free Vulnerability in Linux Kernel Affecting mptlan Driver

CVE-2023-54310

What is CVE-2023-54310?

The Linux kernel mptlan driver contains a use-after-free vulnerability due to a race condition in the mptlan_remove() function. This issue arises when the driver is unloaded while a work queue is still processing, leading to potential access to freed memory. The flaw occurs when mptlan_probe() initializes the workqueue and mpt_lan_wake_post_buckets_task() starts processing it. If the driver is removed concurrently, the device's memory can be freed while it is still being referenced, allowing attackers to exploit this condition to manipulate system operations. The resolution involves ensuring that all work items are completed before the device is cleaned up, thus preventing risks associated with accessing invalid memory.

References