CVE-2023-54326

In the Linux kernel, the following vulnerability has been resolved: misc: pci_endpoint_test: Free IRQs before removing the device In pci_endpoint_test_remove(), freeing the IRQs after removing the device creates a small race window for IRQs to be received with the test device memory already released, causing the IRQ handler to access invalid memory, resulting in an oops. Free the device IRQs before removing the device to avoid this issue.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/14bdee38e96c7d37ca15e7bea50411eee25fe315
https://git.kernel.org/stable/c/38d12bcf4e2ce3d285eb29644a79a54f42040fab
https://git.kernel.org/stable/c/c2dba13bc0c62b79a3cbe4bfe5faa32231bf9b55
https://git.kernel.org/stable/c/cdf9a7e2cdc7a5464e3cc6d0b715ba2b1d215521
https://git.kernel.org/stable/c/dd2210379205fcd23a9d8869b0cef90e3770577c
https://git.kernel.org/stable/c/f61b7634a3249d12b9daa36ffbdb9965b6f24c6c
https://git.kernel.org/stable/c/fb7f8bdb886f2ebf35ee5edaf2bf5f02b063ddb7

Configurations

No configuration.

History

No history.

Information

Published : 2025-12-30 13:16

Updated : 2026-08-04 11:16

NVD link : CVE-2023-54326

Mitre link : CVE-2023-54326

CVE.ORG link : CVE-2023-54326

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2023-54326", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "e03327122e2c8e6ae4565ef5b3d3cbe4364546a1", "lessThan": "fb7f8bdb886f2ebf35ee5edaf2bf5f02b063ddb7", "versionType": "git"}, {"status": "affected", "version": "e03327122e2c8e6ae4565ef5b3d3cbe4364546a1", "lessThan": "dd2210379205fcd23a9d8869b0cef90e3770577c", "versionType": "git"}, {"status": "affected", "version": "e03327122e2c8e6ae4565ef5b3d3cbe4364546a1", "lessThan": "cdf9a7e2cdc7a5464e3cc6d0b715ba2b1d215521", "versionType": "git"}, {"status": "affected", "version": "e03327122e2c8e6ae4565ef5b3d3cbe4364546a1", "lessThan": "14bdee38e96c7d37ca15e7bea50411eee25fe315", "versionType": "git"}, {"status": "affected", "version": "e03327122e2c8e6ae4565ef5b3d3cbe4364546a1", "lessThan": "c2dba13bc0c62b79a3cbe4bfe5faa32231bf9b55", "versionType": "git"}, {"status": "affected", "version": "e03327122e2c8e6ae4565ef5b3d3cbe4364546a1", "lessThan": "38d12bcf4e2ce3d285eb29644a79a54f42040fab", "versionType": "git"}, {"status": "affected", "version": "e03327122e2c8e6ae4565ef5b3d3cbe4364546a1", "lessThan": "f61b7634a3249d12b9daa36ffbdb9965b6f24c6c", "versionType": "git"}], "programFiles": ["drivers/misc/pci_endpoint_test.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.19"}, {"status": "unaffected", "version": "0", "lessThan": "4.19", "versionType": "semver"}, {"status": "unaffected", "version": "4.19.291", "versionType": "semver", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.251", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.188", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.121", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.40", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.4.5", "versionType": "semver", "lessThanOrEqual": "6.4.*"}, {"status": "unaffected", "version": "6.5", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/misc/pci_endpoint_test.c"], "defaultStatus": "affected"}]}], "published": "2025-12-30T13:16:21.947", "references": [{"url": "https://git.kernel.org/stable/c/14bdee38e96c7d37ca15e7bea50411eee25fe315", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/38d12bcf4e2ce3d285eb29644a79a54f42040fab", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c2dba13bc0c62b79a3cbe4bfe5faa32231bf9b55", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/cdf9a7e2cdc7a5464e3cc6d0b715ba2b1d215521", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/dd2210379205fcd23a9d8869b0cef90e3770577c", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/f61b7634a3249d12b9daa36ffbdb9965b6f24c6c", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/fb7f8bdb886f2ebf35ee5edaf2bf5f02b063ddb7", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: pci_endpoint_test: Free IRQs before removing the device\n\nIn pci_endpoint_test_remove(), freeing the IRQs after removing the device\ncreates a small race window for IRQs to be received with the test device\nmemory already released, causing the IRQ handler to access invalid memory,\nresulting in an oops.\n\nFree the device IRQs before removing the device to avoid this issue."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nvarios: pci_endpoint_test: Liberar IRQs antes de eliminar el dispositivo\n\nEn pci_endpoint_test_remove(), liberar las IRQs despu\u00e9s de eliminar el dispositivo crea una peque\u00f1a ventana de carrera para que se reciban IRQs con la memoria del dispositivo de prueba ya liberada, lo que provoca que el controlador de IRQ acceda a memoria no v\u00e1lida, resultando en un oops.\n\nLiberar las IRQs del dispositivo antes de eliminar el dispositivo para evitar este problema."}], "lastModified": "2026-08-04T11:16:40.483", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}