CVE-2023-54326

A use-after-free flaw was found in the Linux kernel's PCI endpoint test driver. In pci_endpoint_test_remove(), IRQs are freed after the device is removed, creating a race window where an IRQ can be delivered after device memory is freed. The IRQ handler then accesses invalid memory, causing a kernel crash.

This affects systems using the PCI endpoint test driver for PCIe endpoint testing. The race occurs during device hot-unplug or driver removal. Production systems typically do not use this test driver, limiting real-world exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.