A flaw was found in the Linux kernel. A use-after-free may be triggered in asus_kbd_backlight_set when plugging/disconnecting in a malicious USB device, which advertises itself as an Asus device. Similarly to the previous known CVE-2023-25012, but in asus devices, the work_struct may be scheduled by the LED controller while the device is disconnecting, triggering a use-after-free on the struct asus_kbd_leds *led structure. A malicious USB device may exploit the issue to cause memory corruption with controlled data.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-modulesUpgrade kernelUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-headersUpgrade perfUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-docUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump | Nov 28, 2023 | Mar 27, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 8, 2023 | Mar 27, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel | May 10, 2023 | Mar 27, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Feb 12, 2023 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 8, 2023 | Mar 27, 2023 |
| Suse | — | Upgrade kernel-azure-develUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-preemptUpgrade kernel-debug-vdsoUpgrade dtb-alUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade kernel-azureUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-vanilla-baseUpgrade dtb-alteraUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-armUpgrade kernel-debug-baseUpgrade dtb-qcomUpgrade kernel-rt-optionalUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade dtb-zteUpgrade kernel-azure-optionalUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade kernel-default-optionalUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-vanilla-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kernel-rt-develUpgrade kernel-rt-extraUpgrade dtb-mediatekUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatchUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade dtb-sprdUpgrade kernel-symsUpgrade gfs2-kmp-defaultUpgrade kernel-default-manUpgrade kernel-debugUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-marvellUpgrade dtb-hisiliconUpgrade kernel-default-baseUpgrade dtb-amdUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-vanillaUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-develUpgrade dtb-xilinxUpgrade dlm-kmp-defaultUpgrade kernel-default-livepatchUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-vanilla-develUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade dtb-caviumUpgrade dtb-amazonUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-azure-baseUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-baseUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade dtb-socionextUpgrade dtb-allwinnerUpgrade kernel-zfcpdump-manUpgrade kernel-preempt-develUpgrade kernel-default-develUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-default | Jun 15, 2023 | Mar 27, 2023 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1110-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1164-awsUpgrade linux-image-5.4.0-1071-gkeopUpgrade linux-image-5.4.0-1093-kvmUpgrade linux-image-4.15.0-1127-oracleUpgrade linux-image-oracleUpgrade linux-image-5.19.0-1025-oracleUpgrade linux-image-5.15.0-1037-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-75-lowlatency-64kUpgrade linux-image-6.1.0-1009-oemUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1040-azure-fdeUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1036-gkeUpgrade linux-image-5.15.0-1033-intel-iotgUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-5.19.0-1028-azureUpgrade linux-image-5.15.0-1022-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-5.19.0-1024-ibmUpgrade linux-image-5.15.0-75-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-5.4.0-1051-ibmUpgrade linux-image-4.15.0-221-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1065-bluefieldUpgrade linux-image-4.15.0-1173-azureUpgrade linux-image-kvmUpgrade linux-image-5.19.0-1021-raspiUpgrade linux-image-5.19.0-1025-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1103-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.19.0-45-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1017-iotUpgrade linux-image-4.15.0-1158-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-azure-cvmUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1148-kvmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi2Upgrade linux-image-5.19.0-1027-awsUpgrade linux-image-5.4.0-152-lowlatencyUpgrade linux-image-5.19.0-45-generic-lpaeUpgrade linux-image-5.19.0-1027-lowlatency-64kUpgrade linux-image-5.15.0-1032-raspiUpgrade linux-image-5.4.0-1102-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-152-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-75-genericUpgrade linux-image-5.15.0-1035-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1032-ibmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.19.0-1027-lowlatencyUpgrade linux-image-5.15.0-1040-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-4.15.0-221-lowlatencyUpgrade linux-image-5.4.0-1088-raspiUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-1026-gcpUpgrade linux-image-5.15.0-1038-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1107-gcpUpgrade linux-image-5.15.0-75-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1036-gcpUpgrade linux-image-bluefieldUpgrade linux-image-gke-5.15Upgrade linux-image-oem-osp1Upgrade linux-image-genericUpgrade linux-image-5.15.0-1032-raspi-nolpaeUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1041-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-5.19.0-45-generic-64kUpgrade linux-image-5.15.0-75-generic-64kUpgrade linux-image-intelUpgrade linux-image-5.4.0-1104-awsUpgrade linux-image-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.19.0-1021-raspi-nolpaeUpgrade linux-image-5.4.0-152-generic-lpaeUpgrade linux-image-gcp | Apr 21, 2023 | Mar 27, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 27, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub