CVE-2023-53488

In the Linux kernel, the following vulnerability has been resolved:

IB/hfi1: Fix possible panic during hotplug remove

During hotplug remove it is possible that the update counters work might be pending, and may run after memory has been freed. Cancel the update counters work before freeing memory.

The patch fixes a race between queued update_cntr_work and device teardown in the hfi1 driver by calling cancel_work_sync() before freeing memory. Impact is a potential kernel panic (availability only) during hot-unplug or driver removal. For the CVSS the PR:H because triggering requires administrative capabilities (e.g., hot-unplug/unbind/rmmod of the hfi1 device) and thus is limited to privileged users on systems with this hardware.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.