CVE-2023-53826

A use-after-free vulnerability was found in the UBI (Unsorted Block Images) subsystem in the Linux kernel. In eraseblk_count_seq_show(), a wear-leveling entry can be accessed after it has been freed in __erase_worker(). The race occurs because ubi->lookuptbl access is not properly synchronized with wl_entry_destroy(), allowing the seq_show function to read from freed memory when displaying erase counts.

This is a use-after-free vulnerability in the UBI flash translation layer that can cause kernel crashes when reading debugfs information while erase operations are occurring. The impact is limited to systems using UBI for flash storage management.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.