CVE-2023-54026

A flaw was found in the Linux kernel's OPP (Operating Performance Points) subsystem. When probe deferral occurs due to unavailable interconnect paths, the OPP table is freed but not removed from the global lazy_opp_tables list. This leads to a use-after-free when the required-opps provider is later added and iterates over the freed table, causing a kernel crash.

This vulnerability affects systems using device tree OPP tables with required-opps dependencies and interconnect paths. The issue occurs during driver probe deferral, a transient condition during boot. Once the system is fully booted, the race window closes. The impact is limited to denial of service during system initialization.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.