CVE-2023-52840

HIGH

Linux Kernel 4.18-4.19.298 - Use-After-Free in synaptics-rmi4 rmi_unregister_function

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() The put_device() calls rmi_release_function() which frees "fn" so the dereference on the next line "fn->num_of_irqs" is a use after free. Move the put_device() to the end to fix this.

References (8)

Core 8

Scores

CVSS v3 7.8
EPSS 0.0024
EPSS Percentile 15.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-416
Status published
Products (19)
Linux/Linux < 4.18
Linux/Linux 24d28e4f1271cb2f91613dada8f2acccd00eff56 - 2f236d8638f5b43e0c72919a6a27fe286c32053f
Linux/Linux 24d28e4f1271cb2f91613dada8f2acccd00eff56 - 303766bb92c5c225cf40f9bbbe7e29749406e2f2
Linux/Linux 24d28e4f1271cb2f91613dada8f2acccd00eff56 - 50d12253666195a14c6cd2b81c376e2dbeedbdff
Linux/Linux 24d28e4f1271cb2f91613dada8f2acccd00eff56 - 6c71e065befb2fae8f1461559b940c04e1071bd5
Linux/Linux 24d28e4f1271cb2f91613dada8f2acccd00eff56 - 7082b1fb5321037bc11ba1cf2d7ed23c6b2b521f
Linux/Linux 24d28e4f1271cb2f91613dada8f2acccd00eff56 - c8e639f5743cf4b01f8c65e0df075fe4d782b585
Linux/Linux 24d28e4f1271cb2f91613dada8f2acccd00eff56 - cc56c4d17721dcb10ad4e9c9266e449be1462683
Linux/Linux 24d28e4f1271cb2f91613dada8f2acccd00eff56 - eb988e46da2e4eae89f5337e047ce372fe33d5b1
Linux/Linux 4.18
... and 9 more
Published May 21, 2024
Tracked Since Feb 18, 2026