CVE-2023-25012

Description

The Linux kernel through 6.1.9 has a Use-After-Free in bigben_remove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long.

Affected Platforms

Weakness Type

CWE-416, CWE-416

References

• http://www.openwall.com/lists/oss-security/2023/02/02/1
• http://www.openwall.com/lists/oss-security/2023/11/05/1
• https://bugzilla.suse.com/show_bug.cgi?id=1207560
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=27d2a…
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=76ca8…
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9fefb…