PT-2023-3345 · Linux+6 · Linux Kernel+6
Publicado
2023-03-23
·
Atualizado
2024-10-21
·
CVE-2023-35828
CVSS v3.1
7.0
Alta
| Vetor | AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.3.2
Description
A use-after-free issue was found in the
renesas usb3 remove() function in the drivers/usb/gadget/udc/renesas usb3.c module of the Linux kernel's USB device driver. This issue is related to a race condition that allows for the reuse of previously freed memory, potentially impacting the confidentiality, integrity, and availability of protected information.Recommendations
For Linux kernel versions prior to 6.3.2, update to version 6.3.2 or later to resolve the issue.
As a temporary workaround, consider disabling the
renesas usb3 remove() function until a patch is available.Correção
Race Condition
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu