The Linux kernel through 6.1.9 has a Use-After-Free in bigben_remove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-25012.json"
[
{
"target": {
"function": "bigben_worker",
"file": "drivers/hid/hid-bigbenff.c"
},
"digest": {
"function_hash": "273026948227071602714984146253039623031",
"length": 1564.0
},
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-25012-0460fa5b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@76ca8da989c7d97a7f76c75d475fe95a584439d7",
"signature_type": "Function"
},
{
"target": {
"function": "bigben_set_led",
"file": "drivers/hid/hid-bigbenff.c"
},
"digest": {
"function_hash": "49550790642047497120172017436086097902",
"length": 631.0
},
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-25012-416d8fe5",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@9fefb6201c4f8dd9f58c581b2a66e5cde2895ea2",
"signature_type": "Function"
},
{
"target": {
"function": "bigben_remove",
"file": "drivers/hid/hid-bigbenff.c"
},
"digest": {
"function_hash": "139532792595065699547609751039221578526",
"length": 154.0
},
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-25012-64fc8e62",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@9fefb6201c4f8dd9f58c581b2a66e5cde2895ea2",
"signature_type": "Function"
},
{
"target": {
"file": "drivers/hid/hid-bigbenff.c"
},
"digest": {
"line_hashes": [
"170801758030258884861538758678594740558",
"249299439092359066189043364722627743794",
"338185359276941740510402377774585588655",
"243988816042995455867667886171933946996",
"194884766443985677085074988040487977982",
"14050074771272841572925121763737910571",
"310848588941783372125153587426800903406",
"114930066354983457361395835245500415982",
"182796686242458689615299952093860967961",
"8856487086507521612684844259235970694",
"45425450697047727821099591776666263505",
"29994108566393786553873268571238061464",
"87361166835025475804465819775434098565",
"58464657697028961571603197470196277868",
"319417364505333290779605446045284606238",
"222499932173199658469388865283481070023",
"172223357612224858570786271706609504995",
"135755269103756455523942389206606290120",
"269138159219430080731722709720880318934",
"87361166835025475804465819775434098565",
"58464657697028961571603197470196277868",
"205193334889348892144716625732812925137",
"37580888543137018229929689971565560820",
"54350655327342768431080282528221078477",
"12976282385784092870387876656271071643",
"335112332198927072552576369584495425474",
"298365815644179876281009239263697715908",
"75293277767135240181672102136738448500",
"155657313313497202882429295917850638759",
"245989983336163126006365334266750952164",
"4243887715503796700629760273369901146",
"271379221828688470156356452522374788708",
"281531320475889412786366087001393100772",
"218899643482385094823171014173114825751",
"29153715790109213959964471663817725152",
"123135806629766317768781298406167394939",
"244211682463083748058152249323332992588",
"110890128933949637954732212540028237021",
"252892435672143168980475661694822741067",
"251648637410287476767106334621474181798",
"229143915330479384821799721147044601002",
"306298246618403798313004315661778723718",
"326221262382217482924765384005787549588",
"92835713279487021264974299402717527285",
"61115457479083266547468666442929555162",
"47852149208762194314475291085487113686",
"193716436960222311270232671761533491997",
"281885871057663333599686874996815656620",
"254283279391829507920935632123963201351",
"46100703413552992586614102686129373539",
"20900816375716886551510191443487014802",
"177753618342386356883083646543526440254",
"315319771030054542194016383492202682748",
"243496798770318132164128249183923634695",
"231809816367966581616030502784605238494",
"9885306284604865265059417382592059605"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-25012-c2b38abc",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@9fefb6201c4f8dd9f58c581b2a66e5cde2895ea2",
"signature_type": "Line"
},
{
"target": {
"function": "hid_bigben_play_effect",
"file": "drivers/hid/hid-bigbenff.c"
},
"digest": {
"function_hash": "253322112641557034882541029482987213618",
"length": 540.0
},
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-25012-c47cc03c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@9fefb6201c4f8dd9f58c581b2a66e5cde2895ea2",
"signature_type": "Function"
},
{
"target": {
"function": "bigben_probe",
"file": "drivers/hid/hid-bigbenff.c"
},
"digest": {
"function_hash": "283228630286872131567950752744282302055",
"length": 2174.0
},
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-25012-cfac3f3d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@9fefb6201c4f8dd9f58c581b2a66e5cde2895ea2",
"signature_type": "Function"
},
{
"target": {
"function": "bigben_worker",
"file": "drivers/hid/hid-bigbenff.c"
},
"digest": {
"function_hash": "130189952422934216779969856399260567000",
"length": 982.0
},
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-25012-d70e5ccc",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@9fefb6201c4f8dd9f58c581b2a66e5cde2895ea2",
"signature_type": "Function"
},
{
"target": {
"file": "drivers/hid/hid-bigbenff.c"
},
"digest": {
"line_hashes": [
"10783932124717809065975525814018063746",
"202233066716543381168893117077506060221",
"333075247382177478790015001077471032434",
"253314601472456783949022845032610302604",
"32406587198122137956585265619737078713",
"79637830955801454955686322642667708249",
"100659576457065707686811531392018260379",
"57330006653911811855992188186599142947",
"46763203180011333946095053591512509477",
"15352880012144436811199965153276177727",
"337767392239476776783508601174493753433",
"8918760447863121913208547831843011759",
"188557900762768751391097565843114349304",
"129656771386629272065452813164927016795",
"339113479530564011719211118262377073845",
"94541647880187338145795639687270206316",
"66751151447730835198057130407968116262",
"137772132008674241987705400607841494738",
"41141773345157091071534849436471571138",
"26768272055240480568538285424629472970"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-25012-e97f7aad",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@76ca8da989c7d97a7f76c75d475fe95a584439d7",
"signature_type": "Line"
}
]