CVE-2023-52629

In the Linux kernel, the following vulnerability has been resolved: sh: push-switch: Reorder cleanup operations to avoid use-after-free bug The original code puts flush_work() before timer_shutdown_sync() in switch_drv_remove(). Although we use flush_work() to stop the worker, it could be rescheduled in switch_timer(). As a result, a use-after-free bug can occur. The details are shown below: (cpu 0) | (cpu 1) switch_drv_remove() | flush_work() | ... | switch_timer // timer | schedule_work(&psw->work) timer_shutdown_sync() | ... | switch_work_handler // worker kfree(psw) // free | | psw->state = 0 // use This patch puts timer_shutdown_sync() before flush_work() to mitigate the bugs. As a result, the worker and timer will be stopped safely before the deallocate operations.

• CWE-416

• https://git.kernel.org/stable/c/246f80a0b17f8f582b2c0996db02998239057c65Patch
• https://git.kernel.org/stable/c/610dbd8ac271aa36080aac50b928d700ee3fe4dePatch
• https://git.kernel.org/stable/c/246f80a0b17f8f582b2c0996db02998239057c65Patch
• https://git.kernel.org/stable/c/610dbd8ac271aa36080aac50b928d700ee3fe4dePatch

Published

Mar 29, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-52623In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52624In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-52625In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52626In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2023-52627In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52628In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2023-5263A vulnerability was found in ZZZCMS 2.1.7 and classified as …8.8
• CVE-2023-52630Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-52631In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52632In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52633In the Linux kernel, the following vulnerability has been re…5
• CVE-2023-52634In the Linux kernel, the following vulnerability has been re…5.5