CVE-2023-53454: linux kernel from 3.12 (inclusive), before 4.14.326 (exclusive), from 4.15 (inclusive), before 4.19.295 (exclusive)…

Affected technology

linux kernel · from 3.12 (inclusive), before 4.14.326 (exclusive)
linux

linux kernel · from 4.15 (inclusive), before 4.19.295 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.257 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.195 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.132 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.53 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.4.16 (exclusive)
linux

linux kernel · from 6.5 (inclusive), before 6.5.3 (exclusive)
linux

Linux · c08d46aa805ba46d501f610c2448d07bea979780 to before ac0d389402a6ff9ad92cea02c2d8c711483b91ab, c08d46aa805ba46d501f610c2448d07bea979780 to before 39c70c19456e50dcb3abfe53539220dff0490f1d, c08d46aa805ba46d501f610c2448d07bea979780 to before df7ca43fe090e1a56c216c8ebc106ef5fd49afc6, c08d46aa805ba46d501f610c2448d07bea979780 to before 15ec7cb55e7d88755aa01d44a7a1015a42bfce86, c08d46aa805ba46d501f610c2448d07bea979780 to before dde88ab4e45beb60b217026207aa9c14c88d71ab, c08d46aa805ba46d501f610c2448d07bea979780 to before 2763732ec1e68910719c75b6b896e11b6d3d622b, c08d46aa805ba46d501f610c2448d07bea979780 to before 1d7833db9fd118415dace2ca157bfa603dec9c8c, c08d46aa805ba46d501f610c2448d07bea979780 to before b70ac7849248ec8128fa12f86e3655ba38838f29, c08d46aa805ba46d501f610c2448d07bea979780 to before 4794394635293a3e74591351fff469cea7ad15a2
Linux

Linux · 3.12
Linux

Component: Not specified by the source
File: drivers/hid/hid-multitouch.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A attacker can trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.