Vulnerability identifier: #VU87745

Vulnerability risk: Low

CVSSv3.1: 7.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-52445

CWE-ID: CWE-416

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor:

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in pvrusb2. A local user can execute arbitrary code with elevated privileges.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

---

External links
http://git.kernel.org/stable/c/ec36c134dd020d28e312c2f1766f85525e747aab
http://git.kernel.org/stable/c/47aa8fcd5e8b5563af4042a00f25ba89bef8f33d
http://git.kernel.org/stable/c/3233d8bf7893550045682192cb227af7fa3defeb
http://git.kernel.org/stable/c/ec3634ebe23fc3c44ebc67c6d25917300bc68c08
http://git.kernel.org/stable/c/30773ea47d41773f9611ffb4ebc9bda9d19a9e7e
http://git.kernel.org/stable/c/2cf0005d315549b8d2b940ff96a66c2a889aa795
http://git.kernel.org/stable/c/437b5f57732bb4cc32cc9f8895d2010ee9ff521c
http://git.kernel.org/stable/c/ded85b0c0edd8f45fec88783d7555a5b982449c1

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.