CVE-2023-54310 scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition
A race condition in the mptlan driver causes a use-after-free during device removal, potentially allowing local attackers to execute code or crash the system.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-54310?
CVE-2023-54310 is a high-severity use after free vulnerability in Linux, published on 30 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition
mptlan_probe() calls mpt_register_lan_device() which initializes the &priv->post_buckets_task workqueue. A call to mpt_lan_wake_post_buckets_task() will subsequently start the work.
During driver unload in mptlan_remove() the following race may occur:
CPU0 CPU1
|mpt_lan_post_receive_buckets_work() mptlan_remove() | free_netdev() | kfree(dev); | | | dev->mtu | //use
Fix this by finishing the work prior to cleaning up in mptlan_remove().
[mkp: we really should remove mptlan instead of attempting to fix it]
Which versions are affected by CVE-2023-54310?
How do I fix CVE-2023-54310?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2023-54310 being exploited?
There is no known exploitation of CVE-2023-54310 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2023-54310, DEBIAN-CVE-2023-54310, GHSA-52c3-vccj-p4f5, UBUNTU-CVE-2023-54310.