Wind River Support Network

HomeDefectsLINCD-11630

Fixed

LINCD-11630 : Security Advisory - linux - CVE-2023-25012

Created: Feb 1, 2023 Updated: Apr 27, 2023

Resolved Date: Mar 31, 2023

Found In Version: 10.20.6.0

Fix Version: 10.23.17.0

Severity: Standard

Applicable for: Wind River Linux CD

Component/s: Kernel

Description

The Linux kernel through 6.1.9 has a Use-After-Free in bigben_remove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long.

CREATE(Triage):(User=admin) CVE-2023-25012 (https://nvd.nist.gov/vuln/detail/CVE-2023-25012)

CVEs

CVE-2023-25012