PT-2023-1663 · Linux+8 · Linux Kernel+8

Duoming Zhou · Published 2023-02-08 · Updated 2024-04-15 · CVE-2023-1118

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a use after free flaw in the Linux kernel's integrated infrared receiver/transceiver driver, specifically in the way a user detaches an rc device. This could allow an attacker to crash the system or potentially escalate their privileges. The flaw is associated with the ene remove() function in the ene ir.c file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2023:7077

ALT-PU-2023-1878

ALT-PU-2023-1881

ALT-PU-2023-4894

ALT-PU-2023-8456

ALT-PU-2024-4263

ALT-PU-2024-4843

AZL-25352

BDU:2023-01218

CESA-2023_6901

CESA-2023_7077

CVE-2023-1118

DLA-3403-1

DLA-3404-1

MGASA-2023-0148

MGASA-2023-0149

OESA-2023-1173

OESA-2023-1174

OESA-2023-1177

OESA-2023-1178

OPENSUSE-SU-2023_0774-1

OPENSUSE-SU-2023_2646-1

OPENSUSE-SU-2023_2871-1

RHSA-2023:6901

RHSA-2023:7077

RHSA-2023_6901

RHSA-2023_7077

RHSA-2024:1653

RHSA-2024:3810

SUSE-SU-2023:0747-1

SUSE-SU-2023:0749-1

SUSE-SU-2023:0749-2

SUSE-SU-2023:0762-1

SUSE-SU-2023:0768-1

SUSE-SU-2023:0770-1

SUSE-SU-2023:0774-1

SUSE-SU-2023:0778-1

SUSE-SU-2023:0779-1

SUSE-SU-2023:0780-1

SUSE-SU-2023:1608-1

SUSE-SU-2023:1609-1

SUSE-SU-2023:1710-1

SUSE-SU-2023:1971-1

SUSE-SU-2023:1972-1

SUSE-SU-2023:1973-1

SUSE-SU-2023:1975-1

SUSE-SU-2023:1977-1

SUSE-SU-2023:1981-1

SUSE-SU-2023:1982-1

SUSE-SU-2023:1983-1

SUSE-SU-2023:1995-1

SUSE-SU-2023:2007-1

SUSE-SU-2023:2009-1

SUSE-SU-2023:2023-1

SUSE-SU-2023:2024-1

SUSE-SU-2023:2031-1

SUSE-SU-2023:2035-1

SUSE-SU-2023:2043-1

SUSE-SU-2023:2055-1

SUSE-SU-2023:2232-1

SUSE-SU-2023:2506-1

SUSE-SU-2023:2646-1

SUSE-SU-2023:2805-1

SUSE-SU-2023:2809-1

SUSE-SU-2023:2871-1

USN-6001-1

USN-6013-1

USN-6014-1

USN-6031-1

USN-6032-1

USN-6033-1

USN-6079-1

USN-6080-1

USN-6081-1

USN-6084-1

USN-6085-1

USN-6090-1

USN-6091-1

USN-6092-1

USN-6094-1

USN-6095-1

USN-6096-1

USN-6109-1

USN-6118-1

USN-6132-1

USN-6133-1

USN-6134-1

USN-6222-1

USN-6256-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Suse

Ubuntu

References · 1038

• https://github.com/torvalds/linux/commit/29b0589a865b6f66d141d79b2dd1373e4e50fe17 · Patch
• https://osv.dev/vulnerability/USN-6133-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1205 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0779-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6081-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1118 · Security Note
• https://ubuntu.com/security/CVE-2023-0386 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-12566.html · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-0416SE47 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1872 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0494 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6092-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6033-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6133-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-45868 · Vendor Advisory