The Linux kernel through 6.1.9 has a Use-After-Free in bigben_remove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long.
{
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25012.json",
"unresolved_ranges": [
{
"extracted_events": [
{
"range": [
{
"last_affected": "6.1.9"
}
],
"source": "DESCRIPTION"
}
]
}
]
}{
"extracted_events": [
{
"range": [
{
"fixed": "76ca8da989c7d97a7f76c75d475fe95a584439d7"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "27d2a2fd844ec7da70d19fabb482304fd1e0595b"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "9fefb6201c4f8dd9f58c581b2a66e5cde2895ea2"
}
],
"source": "REFERENCES_COMMIT"
}
]
}