CVE-2023-52469: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: drivers/amd/pm: fix a use-after-free in kv_parse_power_table When ps allocated by kzalloc equals to NULL, kv_parse_power_table frees adev->pm.dpm.ps that allocated before. However, after the control flow goes through the following call chains: kv_parse_power_table |-> kv_dpm_init |-> kv_dpm_sw_init |-> kv_dpm_fini The adev->pm.dpm.ps is used in the for loop of kv_dpm_fini after its first free in kv_parse_power_table and causes a use-after-free bug.

Affected products

• Linux Linux Kernel: from 4.2.0, before 4.19.306 (fixed in 4.19.306); from 4.20.0, before 5.4.268 (fixed in 5.4.268); from 5.5.0, before 5.10.209 (fixed in 5.10.209); from 5.11.0, before 5.15.148 (fixed in 5.15.148); from 5.16.0, before 6.1.75 (fixed in 6.1.75); from 6.2.0, before 6.6.14 (fixed in 6.6.14); …

Published 2024-02-26. Last modified 2026-08-04.