CVE-2023-53047
02.05.2025, 16:15
In the Linux kernel, the following vulnerability has been resolved:
tee: amdtee: fix race condition in amdtee_open_session
There is a potential race condition in amdtee_open_session that may
lead to use-after-free. For instance, in amdtee_open_session() after
sess->sess_mask is set, and before setting:
sess->session_info[i] = session_info;
if amdtee_close_session() closes this same session, then 'sess' data
structure will be released, causing kernel panic when 'sess' is
accessed within amdtee_open_session().
The solution is to set the bit sess->sess_mask as the last step in
amdtee_open_session().| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | 5.6 ≤ 𝑥 < 5.10.177 |
| linux | linux_kernel | 5.11 ≤ 𝑥 < 5.15.105 |
| linux | linux_kernel | 5.16 ≤ 𝑥 < 6.1.22 |
| linux | linux_kernel | 6.2 ≤ 𝑥 < 6.2.9 |
| linux | linux_kernel | 6.3:rc1 |
| linux | linux_kernel | 6.3:rc2 |
| linux | linux_kernel | 6.3:rc3 |
𝑥
= Vulnerable software versions
Debian Releases
References