CVE-2023-54042

What it actually does

A use-after-free occurs in the Linux kernel VAS code on 64-bit PowerPC when the mm refcount is dropped before coprocessor detachment, allowing access to freed memory structures.

Why it matters to the business

Potential kernel crashes or local privilege escalation on affected PowerPC Linux systems could lead to downtime or full system compromise, though low exploit prevalence limits immediate risk.

How an attack unfolds

An attacker with local access triggers VAS coprocessor operations to exploit the premature mm refcount drop, reusing freed memory for arbitrary kernel code execution or denial of service.

How to fix it

Apply the fix commit f7d92313002b2d543500cc417d8079aaed1fb0a8 or later in the Linux kernel; for grafana-pyroscope-1.12 update to version 1.12.2-r1.

How to confirm the fix worked

Confirm the running kernel includes the referenced commit and exercise VAS functionality on PowerPC hardware to verify stability.

Typical attack path

1. Obtain local user access on a vulnerable PowerPC Linux system
2. Invoke VAS-related operations to race the mm refcount and detachment logic
3. Leverage the resulting use-after-free to corrupt kernel memory or escalate privileges

How to detect it

Review kernel logs and oops reports on PowerPC systems for signs of VAS mm faults or unexpected memory access errors.

What your security team should do

• Patch affected Linux kernels on PowerPC systems immediately
• Restrict local access on unpatched PowerPC hosts
• Monitor kernel logs for VAS or mm-related faults