CVE-2023-52840

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52840
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() The put_device() calls rmi_release_function() which frees "fn" so the dereference on the next line "fn->num_of_irqs" is a use after free. Move the put_device() to the end to fix this.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2f236d8638f5b43e0c72919a6a27fe286c32053f Patch
https://git.kernel.org/stable/c/303766bb92c5c225cf40f9bbbe7e29749406e2f2 Patch
https://git.kernel.org/stable/c/50d12253666195a14c6cd2b81c376e2dbeedbdff Patch
https://git.kernel.org/stable/c/6c71e065befb2fae8f1461559b940c04e1071bd5 Patch
https://git.kernel.org/stable/c/7082b1fb5321037bc11ba1cf2d7ed23c6b2b521f Patch
https://git.kernel.org/stable/c/c8e639f5743cf4b01f8c65e0df075fe4d782b585 Patch
https://git.kernel.org/stable/c/cc56c4d17721dcb10ad4e9c9266e449be1462683 Patch
https://git.kernel.org/stable/c/eb988e46da2e4eae89f5337e047ce372fe33d5b1 Patch
https://git.kernel.org/stable/c/2f236d8638f5b43e0c72919a6a27fe286c32053f Patch
https://git.kernel.org/stable/c/303766bb92c5c225cf40f9bbbe7e29749406e2f2 Patch
https://git.kernel.org/stable/c/50d12253666195a14c6cd2b81c376e2dbeedbdff Patch
https://git.kernel.org/stable/c/6c71e065befb2fae8f1461559b940c04e1071bd5 Patch
https://git.kernel.org/stable/c/7082b1fb5321037bc11ba1cf2d7ed23c6b2b521f Patch
https://git.kernel.org/stable/c/c8e639f5743cf4b01f8c65e0df075fe4d782b585 Patch
https://git.kernel.org/stable/c/cc56c4d17721dcb10ad4e9c9266e449be1462683 Patch
https://git.kernel.org/stable/c/eb988e46da2e4eae89f5337e047ce372fe33d5b1 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

31 Dec 2024, 19:48

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/2f236d8638f5b43e0c72919a6a27fe286c32053f - () https://git.kernel.org/stable/c/2f236d8638f5b43e0c72919a6a27fe286c32053f - Patch
References () https://git.kernel.org/stable/c/303766bb92c5c225cf40f9bbbe7e29749406e2f2 - () https://git.kernel.org/stable/c/303766bb92c5c225cf40f9bbbe7e29749406e2f2 - Patch
References () https://git.kernel.org/stable/c/50d12253666195a14c6cd2b81c376e2dbeedbdff - () https://git.kernel.org/stable/c/50d12253666195a14c6cd2b81c376e2dbeedbdff - Patch
References () https://git.kernel.org/stable/c/6c71e065befb2fae8f1461559b940c04e1071bd5 - () https://git.kernel.org/stable/c/6c71e065befb2fae8f1461559b940c04e1071bd5 - Patch
References () https://git.kernel.org/stable/c/7082b1fb5321037bc11ba1cf2d7ed23c6b2b521f - () https://git.kernel.org/stable/c/7082b1fb5321037bc11ba1cf2d7ed23c6b2b521f - Patch
References () https://git.kernel.org/stable/c/c8e639f5743cf4b01f8c65e0df075fe4d782b585 - () https://git.kernel.org/stable/c/c8e639f5743cf4b01f8c65e0df075fe4d782b585 - Patch
References () https://git.kernel.org/stable/c/cc56c4d17721dcb10ad4e9c9266e449be1462683 - () https://git.kernel.org/stable/c/cc56c4d17721dcb10ad4e9c9266e449be1462683 - Patch
References () https://git.kernel.org/stable/c/eb988e46da2e4eae89f5337e047ce372fe33d5b1 - () https://git.kernel.org/stable/c/eb988e46da2e4eae89f5337e047ce372fe33d5b1 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CWE CWE-416
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel

21 Nov 2024, 08:40

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: Entrada: synaptics-rmi4 - corrige el use after free en rmi_unregister_function(). El put_device() llama a rmi_release_function() que libera "fn", por lo que se elimina la referencia en la siguiente línea "fn-> num_of_irqs" es un uso después de ser gratuito. Mueva put_device() hasta el final para solucionar este problema.
References () https://git.kernel.org/stable/c/2f236d8638f5b43e0c72919a6a27fe286c32053f - () https://git.kernel.org/stable/c/2f236d8638f5b43e0c72919a6a27fe286c32053f -
References () https://git.kernel.org/stable/c/303766bb92c5c225cf40f9bbbe7e29749406e2f2 - () https://git.kernel.org/stable/c/303766bb92c5c225cf40f9bbbe7e29749406e2f2 -
References () https://git.kernel.org/stable/c/50d12253666195a14c6cd2b81c376e2dbeedbdff - () https://git.kernel.org/stable/c/50d12253666195a14c6cd2b81c376e2dbeedbdff -
References () https://git.kernel.org/stable/c/6c71e065befb2fae8f1461559b940c04e1071bd5 - () https://git.kernel.org/stable/c/6c71e065befb2fae8f1461559b940c04e1071bd5 -
References () https://git.kernel.org/stable/c/7082b1fb5321037bc11ba1cf2d7ed23c6b2b521f - () https://git.kernel.org/stable/c/7082b1fb5321037bc11ba1cf2d7ed23c6b2b521f -
References () https://git.kernel.org/stable/c/c8e639f5743cf4b01f8c65e0df075fe4d782b585 - () https://git.kernel.org/stable/c/c8e639f5743cf4b01f8c65e0df075fe4d782b585 -
References () https://git.kernel.org/stable/c/cc56c4d17721dcb10ad4e9c9266e449be1462683 - () https://git.kernel.org/stable/c/cc56c4d17721dcb10ad4e9c9266e449be1462683 -
References () https://git.kernel.org/stable/c/eb988e46da2e4eae89f5337e047ce372fe33d5b1 - () https://git.kernel.org/stable/c/eb988e46da2e4eae89f5337e047ce372fe33d5b1 -

21 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 16:15

Updated : 2024-12-31 19:48

NVD link : CVE-2023-52840

Mitre link : CVE-2023-52840

CVE.ORG link : CVE-2023-52840

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-416

Use After Free