CVE-2023-53047

A use-after-free vulnerability was found in the AMD TEE driver in the Linux kernel. The flaw occurs from a race condition in the amdtee_open_session() function, where the session is marked as active in sess->sess_mask before the corresponding sess structure is fully initialized. If a parallel thread invokes amdtee_close_session() during this window of time, it can lead to the structure being freed prematurely. This can lead to system instability, a denial of service, or remote code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.