Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-25012

Опубликовано: 02 фев. 2023
Источник: debian
EPSS Низкий

Описание

The Linux kernel through 6.1.9 has a Use-After-Free in bigben_remove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
linuxfixed6.1.20-1package
linuxfixed5.10.178-1bullseyepackage
linuxnot-affectedbusterpackage

Примечания

  • https://lore.kernel.org/all/20230125-hid-unregister-leds-v1-1-9a5192dcef16@diag.uniroma1.it/

EPSS

Процентиль: 5%
0.00022
Низкий

Связанные уязвимости

CVSS3: 4.6
ubuntu
около 3 лет назад

The Linux kernel through 6.1.9 has a Use-After-Free in bigben_remove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long.

CVSS3: 4.6
redhat
около 3 лет назад

The Linux kernel through 6.1.9 has a Use-After-Free in bigben_remove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long.

CVSS3: 4.6
nvd
около 3 лет назад

The Linux kernel through 6.1.9 has a Use-After-Free in bigben_remove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long.

CVSS3: 4.6
msrc
почти 3 года назад

Описание отсутствует

CVSS3: 4.6
github
около 3 лет назад

The Linux kernel through 6.1.9 has a Use-After-Free in bigben_remove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long.

EPSS

Процентиль: 5%
0.00022
Низкий