High 7.8Published Oct 1, 2025

CVE-2023-53484lib: cpu_rmap: Avoid use after free on rmap->obj array entries

Updated under an hour ago (Oct 27, 2026, 7:30 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: lib: cpu_rmap: Avoid use after free on rmap->obj array entries When calling irq_set_affinity_notifier() with NULL at the notify argument, it will cause freeing of the glue pointer in the corresponding array entry but will leave the pointer in the array. A subsequent call to free_irq_cpu_rmap() will try to free this entry again leading to possible use after free. Fix that by setting NULL to the array entry and checking that we have non-zero at the array entry when iterating over the array in free_irq_cpu_rmap(). The current code does not suffer from this since there are no cases where irq_set_affinity_notifier(irq, NULL) (note the NULL passed for the notify arg) is called, followed by a call to free_irq_cpu_rmap() so we don't hit and issue. Subsequent patches in this series excersize this flow, hence the required fix.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 15, 2026
First seen by InfoSec Signals: Oct 15, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 896f97ea95c1d29c0520ee0766b66b7f64cb967c before 981f339d2905b6a92ef59358158b326493aecac5; from 896f97ea95c1d29c0520ee0766b66b7f64cb967c before d1308bd0b24cb1d78fa2747d5fa3e055cc628a48; from 896f97ea95c1d29c0520ee0766b66b7f64cb967c before cc2d2b3dbfb0ba57bc027fb7e1121250c50e4000; from 896f97ea95c1d29c0520ee0766b66b7f64cb967c before f748e15253833b771acbede14ea98f50831ac289; from 896f97ea95c1d29c0520ee0766b66b7f64cb967c before c6ed54dd90698dc0744d669524cc1c122ded8a16; from 896f97ea95c1d29c0520ee0766b66b7f64cb967c before c9115f49cf260d24d8b5f2d9a4b63cb31a627bb4; 896f97ea95c1d29c0520ee0766b66b7f64cb967c builds before 67bca5f1d644f4e79b694abd8052a177de81c37f; 896f97ea95c1d29c0520ee0766b66b7f64cb967c builds before 4e0473f1060aa49621d40a113afde24818101d37	CNA record
linux linux_kernel linux:linux_kernel	from 3.8.1 before 4.14.316; from 4.15 before 4.19.284; from 4.20 before 5.4.244; from 5.5 before 5.10.181; from 5.11 before 5.15.113; from 5.16 before 6.1.30; from 6.2 before 6.3.4; 3.8; and 4 more ranges	NVD

References

References

https://git.kernel.org/stable/c/981f339d2905b6a92ef59358158b326493aecac5	patch
https://git.kernel.org/stable/c/d1308bd0b24cb1d78fa2747d5fa3e055cc628a48	patch
https://git.kernel.org/stable/c/cc2d2b3dbfb0ba57bc027fb7e1121250c50e4000	patch
https://git.kernel.org/stable/c/f748e15253833b771acbede14ea98f50831ac289	patch
https://git.kernel.org/stable/c/c6ed54dd90698dc0744d669524cc1c122ded8a16	patch
https://git.kernel.org/stable/c/c9115f49cf260d24d8b5f2d9a4b63cb31a627bb4	patch
https://git.kernel.org/stable/c/67bca5f1d644f4e79b694abd8052a177de81c37f	patch
https://git.kernel.org/stable/c/4e0473f1060aa49621d40a113afde24818101d37	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.