Linux Kernel USB Device drivers/hid/hid-asus.c asus_kbd_backlight_set led use after free

Summaryinfo

A vulnerability categorized as critical has been discovered in Linux Kernel. The affected element is the function asus_kbd_backlight_set of the file drivers/hid/hid-asus.c of the component USB Device Handler. Such manipulation of the argument led leads to use after free. This vulnerability is referenced as CVE-2023-1079. The attack can be executed directly on the physical device. No exploit is available. Applying a patch is advised to resolve this issue.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Linux Kernel (Operating System) (affected version unknown). Affected by this issue is the function asus_kbd_backlight_set of the file drivers/hid/hid-asus.c of the component USB Device Handler. The manipulation of the argument led with an unknown input leads to a use after free vulnerability. Using CWE to declare the problem leads to CWE-416. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code. Impacted is confidentiality, integrity, and availability. CVE summarizes:

A flaw was found in the Linux kernel. A use-after-free may be triggered in asus_kbd_backlight_set when plugging/disconnecting in a malicious USB device, which advertises itself as an Asus device. Similarly to the previous known CVE-2023-25012, but in asus devices, the work_struct may be scheduled by the LED controller while the device is disconnecting, triggering a use-after-free on the struct asus_kbd_leds *led structure. A malicious USB device may exploit the issue to cause memory corruption with controlled data.

The weakness was published 03/28/2023. The advisory is shared for download at git.kernel.org. This vulnerability is handled as CVE-2023-1079 since 02/27/2023. There are known technical details, but no exploit is available.

The vulnerability scanner Nessus provides a plugin with the ID 239841 (TencentOS Server 4: kernel (TSSA-2024:0960)), which helps to determine the existence of the flaw in a target environment.

Applying a patch is able to eliminate this problem. The bugfix is ready for download at git.kernel.org.

The vulnerability is also documented in the databases at Tenable (239841), EUVD (EUVD-2023-23367) and CERT Bund (WID-SEC-2024-1086). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Affected

• SUSE Linux
• IBM QRadar SIEM

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion