CVE - CVE-2023-52840

CVE-ID
CVE-2023-52840	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() The put_device() calls rmi_release_function() which frees "fn" so the dereference on the next line "fn->num_of_irqs" is a use after free. Move the put_device() to the end to fix this.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/2f236d8638f5b43e0c72919a6a27fe286c32053f URL:https://git.kernel.org/stable/c/2f236d8638f5b43e0c72919a6a27fe286c32053f MISC:https://git.kernel.org/stable/c/303766bb92c5c225cf40f9bbbe7e29749406e2f2 URL:https://git.kernel.org/stable/c/303766bb92c5c225cf40f9bbbe7e29749406e2f2 MISC:https://git.kernel.org/stable/c/50d12253666195a14c6cd2b81c376e2dbeedbdff URL:https://git.kernel.org/stable/c/50d12253666195a14c6cd2b81c376e2dbeedbdff MISC:https://git.kernel.org/stable/c/6c71e065befb2fae8f1461559b940c04e1071bd5 URL:https://git.kernel.org/stable/c/6c71e065befb2fae8f1461559b940c04e1071bd5 MISC:https://git.kernel.org/stable/c/7082b1fb5321037bc11ba1cf2d7ed23c6b2b521f URL:https://git.kernel.org/stable/c/7082b1fb5321037bc11ba1cf2d7ed23c6b2b521f MISC:https://git.kernel.org/stable/c/c8e639f5743cf4b01f8c65e0df075fe4d782b585 URL:https://git.kernel.org/stable/c/c8e639f5743cf4b01f8c65e0df075fe4d782b585 MISC:https://git.kernel.org/stable/c/cc56c4d17721dcb10ad4e9c9266e449be1462683 URL:https://git.kernel.org/stable/c/cc56c4d17721dcb10ad4e9c9266e449be1462683 MISC:https://git.kernel.org/stable/c/eb988e46da2e4eae89f5337e047ce372fe33d5b1 URL:https://git.kernel.org/stable/c/eb988e46da2e4eae89f5337e047ce372fe33d5b1
Assigning CNA
kernel.org
Date Record Created
20240521	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240521)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Use of the CVE® List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2024, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation.