CVE-2023-53479

A flaw was found in the Linux kernel's CXL driver. This vulnerability, a use-after-free, allows a local user to cause system instability or a denial of service. The issue arises when the cxl_parse_cfmws() function attempts to use memory that has already been released. This could potentially lead to unauthorized access or control over the system.

This MODERATE impact use-after-free flaw in the Linux kernel's CXL driver. This flaw could allow a privileged attacker to crash the system or leak internal kernel information.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the cxl kernel module from loading. This can be achieved by creating a blacklist file. Create /etc/modprobe.d/blacklist-cxl.conf with the following content: blacklist cxl After creating the file, regenerate the initramfs and reboot the system for the changes to take effect. This may impact systems utilizing CXL devices.