Wind River Support Network

HomeDefectsLIN1021-5182

Fixed

LIN1021-5182 : Security Advisory - linux - CVE-2023-25012

Created: Feb 1, 2023 Updated: May 8, 2023

Resolved Date: May 8, 2023

Found In Version: 10.21.20.1

Fix Version: 10.21.20.18

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Kernel

Description

The Linux kernel through 6.1.9 has a Use-After-Free in bigben_remove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long.

CREATE(Triage):(User=admin) CVE-2023-25012 (https://nvd.nist.gov/vuln/detail/CVE-2023-25012)

CVEs

CVE-2023-25012