CVE-2023-54244
ACPI: EC: Fix oops when removing custom query handlers
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 2.6.33
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: Fix oops when removing custom query handlers When removing custom query handlers, the handler might still be used inside the EC query workqueue, causing a kernel oops if the module holding the callback function was already unloaded. Fix this by flushing the EC query workqueue when removing custom query handlers. Tested on a Acer Travelmate 4002WLMi
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 2.6.32.6 · fixed in 2.6.33
- Linux Linux
2.6.33
References 8
git.kernel.org
- stable/c/130e3eac51912f2c866e7d035992ede25f8feac0
- stable/c/0d528a7c421b1f1772fc1d29370b3b5fc0f42b19
- stable/c/ccae2233e9935a038a35fe8cfd703df905f700e7
- stable/c/066b90bca755f0b876e7b027b75d1796861d6db0
- stable/c/f4a573eed6377d356f835a4b00099d5dacee0da0
- stable/c/86a159fd5bdb01ec34b160cfda1a313b616d9302
- stable/c/fd2c99e81ae0dbdd62a154ef9c77fc01715cc020
- stable/c/e5b492c6bb900fcf9722e05f4a10924410e170c1