https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 20:56:23 +0000 https://vulnerability.circl.lu/vuln/cve-2023-53636 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>clk: microchip: fix potential UAF in auxdev release callback</p> <p>Similar to commit 1c11289b34ab (&#34;peci: cpu: Fix use-after-free in adev_release()&#34;), the auxiliary device is not torn down in the correct order. If auxiliary_device_add() fails, the release callback will be called twice, resulting in a UAF. Due to timing, the auxdev code in this driver &#34;took inspiration&#34; from the aforementioned commit, and thus its bugs too!</p> <p>Moving auxiliary_device_uninit() to the unregister callback instead avoids the issue.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>clk: microchip: fix potential UAF in auxdev release callback</p> <p>Similar to commit 1c11289b34ab (&#34;peci: cpu: Fix use-after-free in adev_release()&#34;), the auxiliary device is not torn down in the correct order. If auxiliary_device_add() fails, the release callback will be called twice, resulting in a UAF. Due to timing, the auxdev code in this driver &#34;took inspiration&#34; from the aforementioned commit, and thus its bugs too!</p> <p>Moving auxiliary_device_uninit() to the unregister callback instead avoids the issue.</p> https://vulnerability.circl.lu/vuln/cve-2023-53636