Strix
26.1K

CVE-2023-54244

UnknownEPSS 0.18%

Last modified

CVE-2023-54244 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: Fix oops when removing custom query handlers When removing custom query handlers, the handler might still be used inside the EC query workqueue, causing a kernel oops if the module holding the callback function was already unloaded. Fix this by flushing the EC query workqueue when removing custom query handlers. Tested on a Acer Travelmate 4002WLMi. EPSS estimates a 0.18% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: Fix oops when removing custom query handlers When removing custom query handlers, the handler might still be used inside the EC query workqueue, causing a kernel oops if the module holding the callback function was already unloaded. Fix this by flushing the EC query workqueue when removing custom query handlers. Tested on a Acer Travelmate 4002WLMi

Metrics

EPSS Probability
0.18%

7.5th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= a62e8f1978f49e52f87a711ff6711b323d4b12ff, < 130e3eac51912f2c866e7d035992ede25f8feac0; >= a62e8f1978f49e52f87a711ff6711b323d4b12ff, < 0d528a7c421b1f1772fc1d29370b3b5fc0f42b19; >= a62e8f1978f49e52f87a711ff6711b323d4b12ff, < ccae2233e9935a038a35fe8cfd703df905f700e7; >= a62e8f1978f49e52f87a711ff6711b323d4b12ff, < 066b90bca755f0b876e7b027b75d1796861d6db0; >= a62e8f1978f49e52f87a711ff6711b323d4b12ff, < f4a573eed6377d356f835a4b00099d5dacee0da0; >= a62e8f1978f49e52f87a711ff6711b323d4b12ff, < 86a159fd5bdb01ec34b160cfda1a313b616d9302; >= a62e8f1978f49e52f87a711ff6711b323d4b12ff, < fd2c99e81ae0dbdd62a154ef9c77fc01715cc020; >= a62e8f1978f49e52f87a711ff6711b323d4b12ff, < e5b492c6bb900fcf9722e05f4a10924410e170c1; 1ff7b99e4983d9e93d25e98ba1ce303ad4e4909e; >= 2.6.32.6, < 2.6.33
LinuxLinux2.6.33

References

Timeline

Published
Last Modified
Status
Deferred

Frequently Asked Questions

What is CVE-2023-54244?
In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: Fix oops when removing custom query handlers When removing custom query handlers, the handler might still be used inside the EC query workqueue, causing a kernel oops if the module holding the callback function was already unloaded. Fix this by flushing the EC query workqueue when removing custom query handlers. Tested on a Acer Travelmate 4002WLMi
How severe is CVE-2023-54244?
Severity scoring for CVE-2023-54244 is pending analysis. The EPSS model estimates a 0.18% probability of exploitation in the next 30 days.
How do I fix CVE-2023-54244?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2023

View all 2023CVEs →

Are you affected by CVE-2023-54244?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST