Use-after-free in Linux kernel - CVE-2023-52475

Vulnerability identifier: #VU90247

CSH Severity: Low

CVSS v4 BT: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52475

CWE-ID: CWE-416

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the powermate_disconnect() function in drivers/input/misc/powermate.c. A local user can escalate privileges on the system.

Linux kernel
openEuler
Dell Data Protection Central
PowerProtect DP Series Appliance (IDPA)
SmartFabric OS10
Storage Resource Manager
EMC Cloud Tiering Appliance
kernel-tools-devel
bpftool
kernel-debuginfo
kernel-devel
kernel
kernel-tools-debuginfo
bpftool-debuginfo
kernel-tools
python3-perf-debuginfo
perf-debuginfo
perf
python2-perf
kernel-debugsource
python2-perf-debuginfo
kernel-source
python3-perf
kernel-headers
Dell EMC Storage Monitoring and Reporting (SMR)
Dell Secure Connect Gateway
RSA Authentication Manager
IBM Security Guardium

Install update from vendor's website.

Linux kernel - addressed in versions 4.14.328, 4.19.297, 5.4.259, 5.10.199, 5.15.136, 6.1.59, 6.5.8, 6.6
SmartFabric OS10 - update to 10.5.4.11
kernel-tools-devel - addressed in versions 4.19.90-2404.2.0.0246, 4.19.90-2404.2.0.0273, 5.10.0-60.134.0.161, 5.10.0-136.72.0.152, 5.10.0-153.51.0.129, 5.10.0-196.0.0.109
bpftool - addressed in versions 4.19.90-2404.2.0.0246, 4.19.90-2404.2.0.0273, 5.10.0-60.134.0.161
kernel-debuginfo - addressed in versions 4.19.90-2404.2.0.0246, 4.19.90-2404.2.0.0273, 5.10.0-60.134.0.161, 5.10.0-136.72.0.152, 5.10.0-153.51.0.129, 5.10.0-196.0.0.109
kernel-devel - addressed in versions 4.19.90-2404.2.0.0246, 4.19.90-2404.2.0.0273, 5.10.0-60.134.0.161, 5.10.0-136.72.0.152, 5.10.0-153.51.0.129, 5.10.0-196.0.0.109
kernel - addressed in versions 4.19.90-2404.2.0.0246, 4.19.90-2404.2.0.0273, 5.10.0-60.134.0.161, 5.10.0-136.72.0.152, 5.10.0-153.51.0.129, 5.10.0-196.0.0.109
kernel-tools-debuginfo - addressed in versions 4.19.90-2404.2.0.0246, 4.19.90-2404.2.0.0273, 5.10.0-60.134.0.161, 5.10.0-136.72.0.152, 5.10.0-153.51.0.129, 5.10.0-196.0.0.109
bpftool-debuginfo - addressed in versions 4.19.90-2404.2.0.0246, 4.19.90-2404.2.0.0273, 5.10.0-60.134.0.161
kernel-tools - addressed in versions 4.19.90-2404.2.0.0246, 4.19.90-2404.2.0.0273, 5.10.0-60.134.0.161, 5.10.0-136.72.0.152, 5.10.0-153.51.0.129, 5.10.0-196.0.0.109
python3-perf-debuginfo - addressed in versions 4.19.90-2404.2.0.0246, 4.19.90-2404.2.0.0273, 5.10.0-60.134.0.161, 5.10.0-136.72.0.152, 5.10.0-153.51.0.129, 5.10.0-196.0.0.109
perf-debuginfo - addressed in versions 4.19.90-2404.2.0.0246, 4.19.90-2404.2.0.0273, 5.10.0-60.134.0.161, 5.10.0-136.72.0.152, 5.10.0-153.51.0.129, 5.10.0-196.0.0.109
perf - addressed in versions 4.19.90-2404.2.0.0246, 4.19.90-2404.2.0.0273, 5.10.0-60.134.0.161, 5.10.0-136.72.0.152, 5.10.0-153.51.0.129, 5.10.0-196.0.0.109
python2-perf - addressed in versions 4.19.90-2404.2.0.0246, 4.19.90-2404.2.0.0273
kernel-debugsource - addressed in versions 4.19.90-2404.2.0.0246, 4.19.90-2404.2.0.0273, 5.10.0-60.134.0.161, 5.10.0-136.72.0.152, 5.10.0-153.51.0.129, 5.10.0-196.0.0.109
python2-perf-debuginfo - addressed in versions 4.19.90-2404.2.0.0246, 4.19.90-2404.2.0.0273
kernel-source - addressed in versions 4.19.90-2404.2.0.0246, 4.19.90-2404.2.0.0273, 5.10.0-60.134.0.161, 5.10.0-136.72.0.152, 5.10.0-153.51.0.129, 5.10.0-196.0.0.109
python3-perf - addressed in versions 4.19.90-2404.2.0.0246, 4.19.90-2404.2.0.0273, 5.10.0-60.134.0.161, 5.10.0-136.72.0.152, 5.10.0-153.51.0.129, 5.10.0-196.0.0.109
Dell EMC Storage Monitoring and Reporting (SMR) - update to 5.0.1.0
Storage Resource Manager - update to 5.0.1.0
kernel-headers - addressed in versions 5.10.0-60.134.0.161, 5.10.0-136.72.0.152, 5.10.0-153.51.0.129, 5.10.0-196.0.0.109
Dell Secure Connect Gateway - update to 5.24.00.14
RSA Authentication Manager - update to 8.7 SP2 Patch 2
IBM Security Guardium - addressed in versions 12.0p31, 12.0p106
EMC Cloud Tiering Appliance - update to 13.2.0.2.29

• https://git.kernel.org/stable/c/8677575c4f39d65bf0d719b5d20e8042e550ccb9
• https://git.kernel.org/stable/c/67cace72606baf1758fd60feb358f4c6be92e1cc
• https://git.kernel.org/stable/c/5aa514100aaf59868d745196258269a16737c7bd
• https://git.kernel.org/stable/c/cd2fbfd8b922b7fdd50732e47d797754ab59cb06
• https://git.kernel.org/stable/c/6a4a396386404e62fb59bc3bde48871a64a82b4f
• https://git.kernel.org/stable/c/2efe67c581a2a6122b328d4bb6f21b3f36f40d46
• https://git.kernel.org/stable/c/e528b1b9d60743e0b26224e3fe7aa74c24b8b2f8
• https://git.kernel.org/stable/c/5c15c60e7be615f05a45cd905093a54b11f461bc
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.328
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.297
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.199
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.136
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.259
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.59
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.8
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6

• Use-after-free in Linux kernel input misc driver
• Multiple vulnerabilities in Dell Secure Connect Gateway
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• openEuler 22.03 LTS SP3 update for kernel
• openEuler 20.03 LTS SP1 update for kernel
• openEuler 20.03 LTS SP4 update for kernel
• openEuler 22.03 LTS update for kernel
• openEuler 22.03 LTS SP1 update for kernel
• openEuler 22.03 LTS SP2 update for kernel
• Multiple vulnerabilities in Dell SmartFabric OS10
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Dell Data Protection Central
• Multiple vulnerabilities in IBM Security Guardium
• RSA Authentication Manager update for third-party components