Use-after-free in Linux kernel - CVE-2023-52629

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU90221

Use-after-free in Linux kernel - CVE-2023-52629

Published: May 31, 2024 / Updated: May 14, 2025


Vulnerability identifier: #VU90221
CSH Severity: Low
CVSS v4 BT: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2023-52629
CWE-ID: CWE-416
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the switch_drv_remove() function in arch/sh/drivers/push-switch.c. A local user can escalate privileges on the system.


Affected software

Linux kernel
Ubuntu
openEuler
linux-image-4.15.0-1165-gcp (Ubuntu package)
linux-image-aws-lts-18.04 (Ubuntu package)
linux-image-aws-hwe (Ubuntu package)
linux-image-4.15.0-1180-azure (Ubuntu package)
linux-image-virtual-hwe-16.04 (Ubuntu package)
linux-image-oem (Ubuntu package)
linux-image-lowlatency-hwe-16.04 (Ubuntu package)
linux-image-generic-hwe-16.04 (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-gcp-lts-18.04 (Ubuntu package)
linux-image-4.15.0-228-lowlatency (Ubuntu package)
linux-image-4.15.0-228-generic (Ubuntu package)
linux-image-4.15.0-1172-aws (Ubuntu package)
linux-image-4.15.0-1155-kvm (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-oem-osp1 (Ubuntu package)
linux-image-5.4.0-193-lowlatency (Ubuntu package)
linux-image-5.4.0-193-generic (Ubuntu package)
linux-image-5.4.0-1135-gcp (Ubuntu package)
linux-image-5.4.0-1130-oracle (Ubuntu package)
linux-image-raspi-hwe-18.04 (Ubuntu package)
linux-image-azure-lts-18.04 (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-5.4.0-1136-azure (Ubuntu package)
linux-image-5.4.0-1131-aws (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-4.15.0-1134-oracle (Ubuntu package)
linux-image-oracle-lts-18.04 (Ubuntu package)
linux-image-5.4.0-1115-raspi (Ubuntu package)
kernel-debuginfo
python3-perf-debuginfo
bpftool-debuginfo
kernel-devel
kernel-tools-devel
python3-perf
perf-debuginfo
python2-perf
python2-perf-debuginfo
kernel-tools
kernel-debugsource
bpftool
kernel-source
kernel-tools-debuginfo
perf
kernel
linux-image-generic-lpae (Ubuntu package)
linux-image-5.4.0-193-generic-lpae (Ubuntu package)
linux-image-5.4.0-1043-iot (Ubuntu package)
linux-image-xilinx-zynqmp (Ubuntu package)
linux-image-5.4.0-1050-xilinx-zynqmp (Ubuntu package)
linux-image-5.4.0-1078-ibm (Ubuntu package)
linux-image-ibm-lts-20.04 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-gkeop-5.4 (Ubuntu package)
linux-image-5.4.0-1098-gkeop (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-5.4.0-1119-kvm (Ubuntu package)
linux-image-oracle-lts-20.04 (Ubuntu package)
linux-image-aws-lts-20.04 (Ubuntu package)
linux-image-gcp-lts-20.04 (Ubuntu package)
linux-image-azure-lts-20.04 (Ubuntu package)
kernel-headers
linux-image-lowlatency-64k (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-5.15.0-119-generic-lpae (Ubuntu package)
linux-image-5.15.0-119-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-119-lowlatency (Ubuntu package)
linux-image-5.15.0-119-generic (Ubuntu package)
linux-image-5.15.0-119-generic-64k (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04d (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-oem-20.04c (Ubuntu package)
linux-image-5.15.0-1035-xilinx-zynqmp (Ubuntu package)
linux-image-gkeop-5.15 (Ubuntu package)
linux-image-5.15.0-1051-gkeop (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.15.0-1061-ibm (Ubuntu package)
linux-image-5.15.0-1061-raspi (Ubuntu package)
linux-image-nvidia-lowlatency (Ubuntu package)
linux-image-nvidia (Ubuntu package)
linux-image-5.15.0-1063-nvidia (Ubuntu package)
linux-image-5.15.0-1063-nvidia-lowlatency (Ubuntu package)
linux-image-5.15.0-1063-intel-iotg (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-gke-5.15 (Ubuntu package)
linux-image-5.15.0-1065-kvm (Ubuntu package)
linux-image-5.15.0-1065-gke (Ubuntu package)
linux-image-oracle-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1066-oracle (Ubuntu package)
linux-image-gcp-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1067-gcp (Ubuntu package)
linux-image-aws-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1068-aws (Ubuntu package)
linux-image-azure-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1071-azure (Ubuntu package)
linux-image-5.15.0-1071-azure-fde (Ubuntu package)
linux-image-azure-cvm (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-azure-fde-lts-22.04 (Ubuntu package)
linux-image-intel-iotg (Ubuntu package)
linux-image-intel (Ubuntu package)

How to mitigate CVE-2023-52629

Install update from vendor's website.

Linux kernel - addressed in versions 6.5.4, 6.6
linux-image-4.15.0-1165-gcp (Ubuntu package) - update to Ubuntu Pro
linux-image-aws-lts-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-aws-hwe (Ubuntu package) - update to Ubuntu Pro (Infra-only)
linux-image-4.15.0-1180-azure (Ubuntu package) - update to Ubuntu Pro
linux-image-virtual-hwe-16.04 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
linux-image-oem (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.4.0.193.191
linux-image-lowlatency-hwe-16.04 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
linux-image-generic-hwe-16.04 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
linux-image-virtual (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.4.0.193.191, 5.15.0.119.119
linux-image-lowlatency (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.4.0.193.191, 5.15.0.119.109
linux-image-kvm (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.4.0.1119.115, 5.15.0.1065.61
linux-image-generic (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.4.0.193.191, 5.15.0.119.119
linux-image-gcp-lts-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-4.15.0-228-lowlatency (Ubuntu package) - update to Ubuntu Pro
linux-image-4.15.0-228-generic (Ubuntu package) - update to Ubuntu Pro
linux-image-4.15.0-1172-aws (Ubuntu package) - update to Ubuntu Pro
linux-image-4.15.0-1155-kvm (Ubuntu package) - update to Ubuntu Pro
linux-image-virtual-hwe-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-oracle (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.15.0.1066.72~20.04.1
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-generic-hwe-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-gcp (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.15.0.1067.75~20.04.1
linux-image-oem-osp1 (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0.193.191
linux-image-5.4.0-193-lowlatency (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-193.213
linux-image-5.4.0-193-generic (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-193.213
linux-image-5.4.0-1135-gcp (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1135.144
linux-image-5.4.0-1130-oracle (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1130.139
linux-image-raspi-hwe-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-azure-lts-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-azure (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.15.0.1071.80~20.04.1
linux-image-5.4.0-1136-azure (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1136.143
linux-image-5.4.0-1131-aws (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1131.141
linux-image-aws (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.15.0.1068.74~20.04.1
linux-image-4.15.0-1134-oracle (Ubuntu package) - update to Ubuntu Pro
linux-image-oracle-lts-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-5.4.0-1115-raspi (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1115.127
kernel-debuginfo - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-200.0.0.113
python3-perf-debuginfo - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-200.0.0.113
bpftool-debuginfo - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165
kernel-devel - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-200.0.0.113
kernel-tools-devel - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-200.0.0.113
python3-perf - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-200.0.0.113
perf-debuginfo - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-200.0.0.113
python2-perf - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276
python2-perf-debuginfo - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276
kernel-tools - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-200.0.0.113
kernel-debugsource - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-200.0.0.113
bpftool - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165
kernel-source - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-200.0.0.113
kernel-tools-debuginfo - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-200.0.0.113
perf - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-200.0.0.113
kernel - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-200.0.0.113
linux-image-generic-lpae (Ubuntu package) - addressed in versions 5.4.0.193.191, 5.15.0.119.119
linux-image-5.4.0-193-generic-lpae (Ubuntu package) - update to 5.4.0-193.213
linux-image-5.4.0-1043-iot (Ubuntu package) - update to 5.4.0-1043.44
linux-image-xilinx-zynqmp (Ubuntu package) - addressed in versions 5.4.0.1050.50, 5.15.0.1035.39
linux-image-5.4.0-1050-xilinx-zynqmp (Ubuntu package) - update to 5.4.0-1050.54
linux-image-5.4.0-1078-ibm (Ubuntu package) - update to 5.4.0-1078.83
linux-image-ibm-lts-20.04 (Ubuntu package) - update to 5.4.0.1078.107
linux-image-gkeop (Ubuntu package) - addressed in versions 5.4.0.1098.96, 5.15.0.1051.50
linux-image-gkeop-5.4 (Ubuntu package) - update to 5.4.0.1098.96
linux-image-5.4.0-1098-gkeop (Ubuntu package) - update to 5.4.0-1098.102
linux-image-raspi (Ubuntu package) - addressed in versions 5.4.0.1115.145, 5.15.0.1061.59
linux-image-raspi2 (Ubuntu package) - update to 5.4.0.1115.145
linux-image-5.4.0-1119-kvm (Ubuntu package) - update to 5.4.0-1119.127
linux-image-oracle-lts-20.04 (Ubuntu package) - update to 5.4.0.1130.123
linux-image-aws-lts-20.04 (Ubuntu package) - update to 5.4.0.1131.128
linux-image-gcp-lts-20.04 (Ubuntu package) - update to 5.4.0.1135.137
linux-image-azure-lts-20.04 (Ubuntu package) - update to 5.4.0.1136.130
kernel-headers - addressed in versions 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-200.0.0.113
linux-image-lowlatency-64k (Ubuntu package) - update to 5.15.0.119.109
linux-image-generic-64k (Ubuntu package) - update to 5.15.0.119.119
linux-image-5.15.0-119-generic-lpae (Ubuntu package) - addressed in versions 5.15.0-119.129, 5.15.0-119.129~20.04.1
linux-image-5.15.0-119-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0-119.129, 5.15.0-119.129~20.04.1
linux-image-5.15.0-119-lowlatency (Ubuntu package) - addressed in versions 5.15.0-119.129, 5.15.0-119.129~20.04.1
linux-image-5.15.0-119-generic (Ubuntu package) - addressed in versions 5.15.0-119.129, 5.15.0-119.129~20.04.1
linux-image-5.15.0-119-generic-64k (Ubuntu package) - addressed in versions 5.15.0-119.129, 5.15.0-119.129~20.04.1
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.15.0.119.129~20.04.1
linux-image-oem-20.04d (Ubuntu package) - update to 5.15.0.119.129~20.04.1
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.119.129~20.04.1
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.15.0.119.129~20.04.1
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.15.0.119.129~20.04.1
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.119.129~20.04.1
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.15.0.119.129~20.04.1
linux-image-oem-20.04 (Ubuntu package) - update to 5.15.0.119.129~20.04.1
linux-image-oem-20.04b (Ubuntu package) - update to 5.15.0.119.129~20.04.1
linux-image-oem-20.04c (Ubuntu package) - update to 5.15.0.119.129~20.04.1
linux-image-5.15.0-1035-xilinx-zynqmp (Ubuntu package) - update to 5.15.0-1035.39
linux-image-gkeop-5.15 (Ubuntu package) - addressed in versions 5.15.0.1051.50, 5.15.0.1051.58~20.04.1
linux-image-5.15.0-1051-gkeop (Ubuntu package) - addressed in versions 5.15.0-1051.58, 5.15.0-1051.58~20.04.1
linux-image-ibm (Ubuntu package) - addressed in versions 5.15.0.1061.57, 5.15.0.1061.64~20.04.1
linux-image-raspi-nolpae (Ubuntu package) - update to 5.15.0.1061.59
linux-image-5.15.0-1061-ibm (Ubuntu package) - addressed in versions 5.15.0-1061.64, 5.15.0-1061.64~20.04.1
linux-image-5.15.0-1061-raspi (Ubuntu package) - update to 5.15.0-1061.64
linux-image-nvidia-lowlatency (Ubuntu package) - update to 5.15.0.1063.63
linux-image-nvidia (Ubuntu package) - update to 5.15.0.1063.63
linux-image-intel-iotg (Ubuntu package) - addressed in versions 5.15.0.1063.63, 5.15.0.1063.69~20.04.1
linux-image-5.15.0-1063-nvidia (Ubuntu package) - update to 5.15.0-1063.64
linux-image-5.15.0-1063-nvidia-lowlatency (Ubuntu package) - update to 5.15.0-1063.64
linux-image-5.15.0-1063-intel-iotg (Ubuntu package) - addressed in versions 5.15.0-1063.69, 5.15.0-1063.69~20.04.1
linux-image-intel (Ubuntu package) - update to 5.15.0.1063.69~20.04.1
linux-image-gke (Ubuntu package) - update to 5.15.0.1065.64
linux-image-gke-5.15 (Ubuntu package) - update to 5.15.0.1065.64
linux-image-5.15.0-1065-kvm (Ubuntu package) - update to 5.15.0-1065.70
linux-image-5.15.0-1065-gke (Ubuntu package) - update to 5.15.0-1065.71
linux-image-oracle-lts-22.04 (Ubuntu package) - update to 5.15.0.1066.62
linux-image-5.15.0-1066-oracle (Ubuntu package) - addressed in versions 5.15.0-1066.72, 5.15.0-1066.72~20.04.1
linux-image-gcp-lts-22.04 (Ubuntu package) - update to 5.15.0.1067.63
linux-image-5.15.0-1067-gcp (Ubuntu package) - addressed in versions 5.15.0-1067.75, 5.15.0-1067.75~20.04.1
linux-image-aws-lts-22.04 (Ubuntu package) - update to 5.15.0.1068.68
linux-image-5.15.0-1068-aws (Ubuntu package) - addressed in versions 5.15.0-1068.74, 5.15.0-1068.74~20.04.1
linux-image-azure-lts-22.04 (Ubuntu package) - update to 5.15.0.1071.69
linux-image-5.15.0-1071-azure (Ubuntu package) - addressed in versions 5.15.0-1071.80, 5.15.0-1071.80~20.04.1
linux-image-5.15.0-1071-azure-fde (Ubuntu package) - addressed in versions 5.15.0-1071.80.1, 5.15.0-1071.80~20.04.1.1
linux-image-azure-cvm (Ubuntu package) - update to 5.15.0.1071.80~20.04.1
linux-image-azure-fde (Ubuntu package) - update to 5.15.0.1071.80~20.04.1.48
linux-image-azure-fde-lts-22.04 (Ubuntu package) - update to 5.15.0.1071.80.48

External References

Related Security Bulletins