CVE-2023-4134: Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()
A use-after-free vulnerability was found in the cyttsp4core driver in the Linux kernel. This issue occurs in the device cleanup routine due to a possible rearming of the watchdogtimer from the workqueue. This could allow a local user to crash the system, causing a denial of service.
Other sources
From the upstream fix below: The watchdogtimer can schedule txtimeouttask and watchdogwork can also arm watchdogtimer [..] Although deltimersync() and cancelworksync() are called in cyttsp4remove(), the timer and workqueue could still be rearmed. As a result, the possible use after free bugs could happen.
Upstream commit: https://github.com/torvalds/linux/commit/dbe836576f12743a7d2d170ad4ad4fd324c4d47a
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.27-1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.5
Event History
Frequently Asked Questions
What is the severity of CVE-2023-4134?
CVE-2023-4134 has been classified as a high-severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2023-4134?
To mitigate CVE-2023-4134, update the Linux kernel to versions higher than 6.5 or apply the relevant patches provided by your distribution.
Which Linux distributions are affected by CVE-2023-4134?
CVE-2023-4134 affects various distributions, including Red Hat, Fedora, and Debian systems running specific versions of the kernel.
What type of vulnerability is CVE-2023-4134?
CVE-2023-4134 is a use-after-free vulnerability found in the cyttsp4_core driver of the Linux kernel.
Can CVE-2023-4134 be exploited by remote attackers?
CVE-2023-4134 requires local user access for exploitation, limiting its risk as a remote attack vector.