CVE-2023-53800

A use-after-free was found in the UBI (Unsorted Block Images) subsystem of the Linux kernel. When ubi_change_vtbl_record() fails during volume resize, the new EBA table is freed but remains referenced by vol->eba_tbl. Subsequent volume operations access this freed memory, triggering use-after-free.

UBI is used primarily on raw flash devices in embedded systems. Enterprise servers typically use block devices with traditional filesystems, limiting exposure. Triggering this requires failed volume resize operations on UBI volumes.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.