CVE-2023-52475

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-52475
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52475.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-52475
Downstream
Related
Published
2024-02-29T05:43:08.838Z
Modified
2026-04-11T12:46:31.374231Z
Summary
Input: powermate - fix use-after-free in powermate_config_complete
Details

In the Linux kernel, the following vulnerability has been resolved:

Input: powermate - fix use-after-free in powermateconfigcomplete

syzbot has found a use-after-free bug [1] in the powermate driver. This happens when the device is disconnected, which leads to a memory free from the powermate_device struct. When an asynchronous control message completes after the kfree and its callback is invoked, the lock does not exist anymore and hence the bug.

Use usbkillurb() on pm->config to cancel any in-progress requests upon device disconnection.

[1] https://syzkaller.appspot.com/bug?extid=0434ac83f907a1dbdd1e

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52475.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Fixed
8677575c4f39d65bf0d719b5d20e8042e550ccb9
Fixed
67cace72606baf1758fd60feb358f4c6be92e1cc
Fixed
5aa514100aaf59868d745196258269a16737c7bd
Fixed
cd2fbfd8b922b7fdd50732e47d797754ab59cb06
Fixed
6a4a396386404e62fb59bc3bde48871a64a82b4f
Fixed
2efe67c581a2a6122b328d4bb6f21b3f36f40d46
Fixed
e528b1b9d60743e0b26224e3fe7aa74c24b8b2f8
Fixed
5c15c60e7be615f05a45cd905093a54b11f461bc

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52475.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.12
Fixed
4.14.328
Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
4.19.297
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.259
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.199
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.136
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.59
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.5.8

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52475.json"