CVE-2023-54207: HID: uclogic: Correct devm device reference for hidinput input_dev name
HID: uclogic: Correct devm device reference for hidinput inputdev name
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In the HID uclogic driver, reference the HID device rather than the input device for devm resource management, and use devm_kasprintf for allocating and formatting the input_dev name so it remains valid while the dependent uevent can fire.
Event History
Frequently Asked Questions
What is the severity of CVE-2023-54207?
CVE-2023-54207 has been classified as a low severity vulnerability.
How do I fix CVE-2023-54207?
To resolve CVE-2023-54207, you should upgrade to the latest version of the Linux kernel that includes the fix.
What systems are affected by CVE-2023-54207?
CVE-2023-54207 affects various versions of the Linux kernel, specifically those between 4.1 and 5.10.249, 5.11 and 5.15.199, 5.16 and 6.1.53, 6.2 and 6.4.16, and 6.5 and 6.5.3.
What types of devices are impacted by CVE-2023-54207?
This vulnerability impacts HID devices that utilize the uclogic driver in the Linux kernel.
Is CVE-2023-54207 specific to a certain Linux distribution?
No, CVE-2023-54207 is related to the Linux kernel itself, making it a concern for all distributions using the affected kernel versions.