CVE-2023-54083
High
Description
In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Clear the driver reference in usb-phy dev For the dual-role port, it will assign the phy dev to usb-phy dev and use the port dev driver as the dev driver of usb-phy. When we try to destroy the port dev, it will destroy its dev driver as well. But we did not remove the reference from usb-phy dev. This might cause the use-after-free issue in KASAN.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedDec 24, 2025
First seenDec 24, 2025
How to fix
Update
- Linux Linuxb6a107c52073496d2e5d2837915f59fb3103832f, b84998a407a882991916b1a61d987c400d8a0ce6, 238edc04ddb9d272b38f5419bcd419ad3b92b91b, 82187460347ad58fd6b06d2883da73c3f2df9631, c0c2fcb1325d0d4f3b322b5ee49385f8eca2560d or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | e8f7d2f409a15c519d5a6085777d85c1c4bab73a ≤ v < b6a107c52073496d2e5d2837915f59fb3103832f, e8f7d2f409a15c519d5a6085777d85c1c4bab73a ≤ v < b84998a407a882991916b1a61d987c400d8a0ce6, e8f7d2f409a15c519d5a6085777d85c1c4bab73a ≤ v < 238edc04ddb9d272b38f5419bcd419ad3b92b91b, e8f7d2f409a15c519d5a6085777d85c1c4bab73a ≤ v < 82187460347ad58fd6b06d2883da73c3f2df9631, e8f7d2f409a15c519d5a6085777d85c1c4bab73a ≤ v < c0c2fcb1325d0d4f3b322b5ee49385f8eca2560d, 5.7 | b6a107c52073496d2e5d2837915f59fb3103832f, b84998a407a882991916b1a61d987c400d8a0ce6, 238edc04ddb9d272b38f5419bcd419ad3b92b91b, 82187460347ad58fd6b06d2883da73c3f2df9631, c0c2fcb1325d0d4f3b322b5ee49385f8eca2560d |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.