CVE-2023-54084
Use-After-Free Vulnerability in Linux ALSA firewire-digi00x Component
Publication date: 2025-12-24
Last updated on: 2025-12-24
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a use-after-free issue in the Linux kernel's ALSA firewire-digi00x driver. Specifically, when the init_stream() function fails, the code incorrectly frees the rx_stream resource but returns success instead of an error. This can lead to the system attempting to use memory that has already been freed, causing potential instability or security risks.
How can this vulnerability impact me? :
The use-after-free vulnerability can lead to system instability, crashes, or potentially allow an attacker to execute arbitrary code or cause denial of service by exploiting the freed memory. This can compromise the reliability and security of systems running the affected Linux kernel.