Use-After-Free Vulnerability in Linux Kernel HID: nvidia-shield Package
Summary
DEBIAN-CVE-2023-53253: In the Linux kernel, the following vulnerability has been resolved: HID: nvidia-shield: Reference hid_device devm allocation of input_dev name Use hid_device for devm allocation of the input_dev name to avoid a use-after... Affects linux versions < 6.5.3-1. Fixed in 6.5.3-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It is known for its stability, performance, and flexibility. The HID (Human Interface Device) subsystem allows the kernel to manage input devices such as keyboards, mice, and game controllers. This vulnerability specifically affects the nvidia-shield HID device, which is used for gaming input, highlighting a critical flaw in resource management within the kernel.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the HID subsystem related to the nvidia-shield device. The issue arises from improper management of the input_dev name during the device's lifecycle. Specifically, the hid_device's devm allocation for the input_dev name can lead to a use-after-free condition. When the input_unregister_device function is called, it triggers the cleanup of all resources associated with the input_dev, which includes freeing the name. This freed name may then be referenced in a uevent, potentially leading to undefined behavior or system crashes.
How To Fix
Minimum fixed version
6.5.3-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. It is advisable to apply the patch as soon as it is available to mitigate any potential risks.
Conclusion
The vulnerability identified in the Linux kernel's HID subsystem poses significant risks due to improper resource management. Users are strongly advised to update their systems to the latest patched version to mitigate these risks. Regular monitoring and prompt updates are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a use-after-free issue in the Linux kernel's HID subsystem, specifically affecting the nvidia-shield device.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Exploiting this vulnerability could lead to system crashes, undefined behavior, or potential security breaches due to improper resource management.
Yes, a patch is available in version 6.5.3-1 of the Linux package for Debian users.
While there are no specific workarounds, it is crucial to monitor your system for any unusual behavior and apply the patch as soon as possible.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
