CVE-2023-52509: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-52509 is a use-after-free vulnerability discovered in the Renesas Ethernet AVB driver (ravb) of the Linux kernel. The vulnerability was identified by Zheng Wang and affects Linux kernel versions from 4.2 up to (excluding) 6.5.8, as well as 6.6-rc1 through 6.6-rc5 (NVD).

The vulnerability exists in the ravb_tx_timeout_work() function where a use-after-free condition can occur during device removal. The issue arises because ravb_stop() does not properly call cancel_work_sync(), which can lead to a race condition where ravb_tx_timeout_work() attempts to use the freed priv structure after ravb_remove() has already freed it (Kernel Patch). The vulnerability has been assigned a CVSS v3.1 score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) (NVD).

A privileged local attacker could exploit this vulnerability to cause a denial of service (system crash) by triggering a use-after-free condition in the Renesas Ethernet AVB driver (Ubuntu Notice).

The vulnerability requires local access and privileged user permissions to exploit. There are no known public exploits at the time of reporting.

The vulnerability has been fixed by adding a call to cancel_work_sync() in the ravb_stop() function. Users should update their Linux kernel to versions that include the fix. The patch has been backported to multiple stable kernel versions (Kernel Patch).