CVE-2023-54244 - Vulnerability Details

- ACPI: EC: Fix oops when removing custom query handlers

Description

In the Linux kernel, the following vulnerability has been resolved:

ACPI: EC: Fix oops when removing custom query handlers

When removing custom query handlers, the handler might still
be used inside the EC query workqueue, causing a kernel oops
if the module holding the callback function was already unloaded.

Fix this by flushing the EC query workqueue when removing
custom query handlers.

Tested on a Acer Travelmate 4002WLMi

Published: 2025-12-30

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`a62e8f1978f49e52f87a711ff6711b323d4b12ff`	affected	< 130e3eac51912f2c866e7d035992ede25f8feac0
`a62e8f1978f49e52f87a711ff6711b323d4b12ff`	affected	< 0d528a7c421b1f1772fc1d29370b3b5fc0f42b19
`a62e8f1978f49e52f87a711ff6711b323d4b12ff`	affected	< ccae2233e9935a038a35fe8cfd703df905f700e7
`a62e8f1978f49e52f87a711ff6711b323d4b12ff`	affected	< 066b90bca755f0b876e7b027b75d1796861d6db0
`a62e8f1978f49e52f87a711ff6711b323d4b12ff`	affected	< f4a573eed6377d356f835a4b00099d5dacee0da0
`a62e8f1978f49e52f87a711ff6711b323d4b12ff`	affected	< 86a159fd5bdb01ec34b160cfda1a313b616d9302
`a62e8f1978f49e52f87a711ff6711b323d4b12ff`	affected	< fd2c99e81ae0dbdd62a154ef9c77fc01715cc020
`a62e8f1978f49e52f87a711ff6711b323d4b12ff`	affected	< e5b492c6bb900fcf9722e05f4a10924410e170c1
`1ff7b99e4983d9e93d25e98ba1ce303ad4e4909e`	affected	—
`2.6.32.6`	affected	< 2.6.33

Linux

affected

Version	Status	Constraints
`2.6.33`	affected	—
`0`	unaffected	< 2.6.33
`4.14.316`	unaffected	≤ 4.14.*
`4.19.284`	unaffected	≤ 4.19.*
`5.4.244`	unaffected	≤ 5.4.*
`5.10.181`	unaffected	≤ 5.10.*
`5.15.113`	unaffected	≤ 5.15.*
`6.1.30`	unaffected	≤ 6.1.*
`6.3.4`	unaffected	≤ 6.3.*
`6.4`	unaffected	≤ *

No data.

No data available yet.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00047.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/066b90bca755f0b876e7b027b75d1796861d6db0
https://git.kernel.org/stable/c/0d528a7c421b1f1772fc1d29370b3b5fc0f42b19
https://git.kernel.org/stable/c/130e3eac51912f2c866e7d035992ede25f8feac0
https://git.kernel.org/stable/c/86a159fd5bdb01ec34b160cfda1a313b616d9302
https://git.kernel.org/stable/c/ccae2233e9935a038a35fe8cfd703df905f700e7
https://git.kernel.org/stable/c/e5b492c6bb900fcf9722e05f4a10924410e170c1
https://git.kernel.org/stable/c/f4a573eed6377d356f835a4b00099d5dacee0da0
https://git.kernel.org/stable/c/fd2c99e81ae0dbdd62a154ef9c77fc01715cc020
https://lore.kernel.org/linux-cve-announce/2025123052-CVE-2023-54244-9a1f@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-54244
https://www.cve.org/CVERecord?id=CVE-2023-54244

History

Wed, 31 Dec 2025 12:15:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025123052-CVE-2023-54244-9a1f@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2023-54244 https://www.cve.org/CVERecord?id=CVE-2023-54244
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Low`

Tue, 30 Dec 2025 12:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: Fix oops when removing custom query handlers When removing custom query handlers, the handler might still be used inside the EC query workqueue, causing a kernel oops if the module holding the callback function was already unloaded. Fix this by flushing the EC query workqueue when removing custom query handlers. Tested on a Acer Travelmate 4002WLMi
Title		ACPI: EC: Fix oops when removing custom query handlers
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/066b90bca755f0b876e7b027b75d1796861d6db0 https://git.kernel.org/stable/c/0d528a7c421b1f1772fc1d29370b3b5fc0f42b19 https://git.kernel.org/stable/c/130e3eac51912f2c866e7d035992ede25f8feac0 https://git.kernel.org/stable/c/86a159fd5bdb01ec34b160cfda1a313b616d9302 https://git.kernel.org/stable/c/ccae2233e9935a038a35fe8cfd703df905f700e7 https://git.kernel.org/stable/c/e5b492c6bb900fcf9722e05f4a10924410e170c1 https://git.kernel.org/stable/c/f4a573eed6377d356f835a4b00099d5dacee0da0 https://git.kernel.org/stable/c/fd2c99e81ae0dbdd62a154ef9c77fc01715cc020

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-12-30T12:15:43.397Z

Updated: 2026-05-23T15:34:41.468Z

Reserved: 2025-12-30T12:06:44.512Z

Link: CVE-2023-54244

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2025-12-30T13:16:12.993

Modified: 2026-04-15T00:35:42.020

Link: CVE-2023-54244

Redhat

Severity : Low

Publid Date: 2025-12-30T00:00:00Z

Links: CVE-2023-54244 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object