CVE-2023-53039

In the Linux kernel, the following vulnerability has been resolved:

HID: intel-ish-hid: ipc: Fix potential use-after-free in work function

When a reset notify IPC message is received, the ISR schedules a work function and passes the ISHTP device to it via a global pointer ishtp_dev. If ish_probe() fails, the devm-managed device resources including ishtp_dev are freed, but the work is not cancelled, causing a use-after-free when the work function tries to access ishtp_dev. Use devm_work_autocancel() instead, so that the work is automatically cancelled if probe fails.

This vulnerability is rated as having Moderate impact for Red Hat Enterprise Linux because exploitation requires local access on systems equipped with Intel Integrated Sensor Hub (ISH) hardware and depends on a failed device initialization sequence to induce a denial of service. The Intel ISH subsystem is primarily intended for sensor management in client platforms rather than standard server environments, reducing typical enterprise exposure. While a use-after-free condition could result in a kernel crash, it requires specific hardware probing failures and cannot be triggered remotely.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.