Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
CVE-2023-1079: Linux kernel ASUS USB backlight can cause crash
CVE-2023-1079 · published 3 years ago
Summary
The Linux kernel used in Canonical's Azure, AWS HWE, GCP, HWE, and Oracle images may mishandle a malicious USB device that pretends to be an ASUS keyboard, leading to memory corruption and possible system crashes. This occurs when plugging or unplugging such a device. Apply the latest kernel updates from your distribution as soon as they are available to fix the issue.
What to do
- Update canonical linux-azure to version 4.15.0-1173.188~14.04.1.
- Update canonical linux-aws-hwe to version 4.15.0-1164.177~16.04.1.
- Update canonical linux-azure to version 4.15.0-1173.188~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1158.175~16.04.1.
- Update canonical linux-hwe to version 4.15.0-221.232~16.04.1.
- Update canonical linux-oracle to version 4.15.0-1127.138~16.04.1.
- Update canonical linux to version 4.15.0-221.232.
- Update canonical linux-aws to version 4.15.0-1164.177.
- Update canonical linux-aws-5.4 to version 5.4.0-1104.112~18.04.1.
- Update canonical linux-azure-4.15 to version 4.15.0-1173.188.
- Update canonical linux-azure-5.4 to version 5.4.0-1110.116~18.04.1.
- Update canonical linux-gcp-4.15 to version 4.15.0-1158.175.
- Update canonical linux-gcp-5.4 to version 5.4.0-1107.116~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-152.169~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1051.56~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1148.153.
- Update canonical linux-oracle to version 4.15.0-1127.138.
- Update canonical linux-oracle-5.4 to version 5.4.0-1103.112~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1088.99~18.04.1.
- Update canonical linux-aws-fips to version 4.15.0-2103.109.
- Update canonical linux-azure-fips to version 4.15.0-2082.88.
- Update canonical linux-fips to version 4.15.0-1119.130.
- Update canonical linux-gcp-fips to version 4.15.0-2066.71.
- Update canonical linux to version 5.4.0-152.169.
- Update canonical linux-aws to version 5.4.0-1104.112.
- Update canonical linux-aws-5.15 to version 5.15.0-1038.43~20.04.1.
- Update canonical linux-azure to version 5.4.0-1110.116.
- Update canonical linux-azure-5.15 to version 5.15.0-1040.47~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1065.71.
- Update canonical linux-gcp to version 5.4.0-1107.116.
- Update canonical linux-gcp-5.15 to version 5.15.0-1036.44~20.04.1.
- Update canonical linux-gke to version 5.4.0-1102.109.
- Update canonical linux-gke-5.15 to version 5.15.0-1036.41~20.04.1.
- Update canonical linux-gkeop to version 5.4.0-1071.75.
- Update canonical linux-gkeop-5.15 to version 5.15.0-1022.27~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-75.82~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1051.56.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1033.38~20.04.1.
- Update canonical linux-iot to version 5.4.0-1017.18.
- Update canonical linux-kvm to version 5.4.0-1093.99.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-75.82~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1015.15~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1103.112.
- Update canonical linux-oracle-5.15 to version 5.15.0-1037.43~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1088.99.
- Update canonical linux-riscv-5.15 to version 5.15.0-1035.39~20.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.4.0-1024.28.
- Update canonical linux-aws-fips to version 5.4.0-1104.112+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1110.116+fips1.
- Update canonical linux-fips to version 5.4.0-1079.88.
- Update canonical linux-gcp-fips to version 5.4.0-1107.116+fips1.
- Update canonical linux to version 5.15.0-75.82.
- Update canonical linux-aws to version 5.15.0-1038.43.
- Update canonical linux-azure to version 5.15.0-1040.47.
- Update canonical linux-azure-fde to version 5.15.0-1041.48.1.
- Update canonical linux-gcp to version 5.15.0-1036.44.
- Update canonical linux-gke to version 5.15.0-1036.41.
- Update canonical linux-gkeop to version 5.15.0-1022.27.
- Update canonical linux-hwe-5.19 to version 5.19.0-45.46~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1032.35.
- Update canonical linux-intel-iotg to version 5.15.0-1033.38.
- Update canonical linux-kvm to version 5.15.0-1035.40.
- Update canonical linux-lowlatency to version 5.15.0-75.82.
- Update canonical linux-nvidia to version 5.15.0-1027.27.
- Update canonical linux-nvidia-tegra to version 5.15.0-1015.15.
- Update canonical linux-oem-6.1 to version 6.1.0-1009.9.
- Update canonical linux-oracle to version 5.15.0-1037.43.
- Update canonical linux-raspi to version 5.15.0-1032.35.
- Update canonical linux-bluefield to version 5.15.0-1019.21.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1033.35.
- Update canonical linux-realtime to version 5.15.0-1040.45.
- Update debian linux to version 6.1.20-1.
- Update linux linux_kernel to version 6.3 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1173.188~14.04.1 Fix: upgrade to 4.15.0-1173.188~14.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1164.177~16.04.1 Fix: upgrade to 4.15.0-1164.177~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure |
< 4.15.0-1173.188~16.04.1 Fix: upgrade to 4.15.0-1173.188~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1158.175~16.04.1 Fix: upgrade to 4.15.0-1158.175~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe |
< 4.15.0-221.232~16.04.1 Fix: upgrade to 4.15.0-221.232~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1127.138~16.04.1 Fix: upgrade to 4.15.0-1127.138~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux |
< 4.15.0-221.232 Fix: upgrade to 4.15.0-221.232
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws |
< 4.15.0-1164.177 Fix: upgrade to 4.15.0-1164.177
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1104.112~18.04.1 Fix: upgrade to 5.4.0-1104.112~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1173.188 Fix: upgrade to 4.15.0-1173.188
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1110.116~18.04.1 Fix: upgrade to 5.4.0-1110.116~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1158.175 Fix: upgrade to 4.15.0-1158.175
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1107.116~18.04.1 Fix: upgrade to 5.4.0-1107.116~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-152.169~18.04.1 Fix: upgrade to 5.4.0-152.169~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1051.56~18.04.1 Fix: upgrade to 5.4.0-1051.56~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1148.153 Fix: upgrade to 4.15.0-1148.153
|
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1127.138 Fix: upgrade to 4.15.0-1127.138
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1103.112~18.04.1 Fix: upgrade to 5.4.0-1103.112~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1088.99~18.04.1 Fix: upgrade to 5.4.0-1088.99~18.04.1
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2103.109 Fix: upgrade to 4.15.0-2103.109
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2082.88 Fix: upgrade to 4.15.0-2082.88
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1119.130 Fix: upgrade to 4.15.0-1119.130
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips |
< 4.15.0-2066.71 Fix: upgrade to 4.15.0-2066.71
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-152.169 Fix: upgrade to 5.4.0-152.169
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1104.112 Fix: upgrade to 5.4.0-1104.112
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1038.43~20.04.1 Fix: upgrade to 5.15.0-1038.43~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1110.116 Fix: upgrade to 5.4.0-1110.116
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1040.47~20.04.1 Fix: upgrade to 5.15.0-1040.47~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1065.71 Fix: upgrade to 5.4.0-1065.71
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1107.116 Fix: upgrade to 5.4.0-1107.116
|
Showing 50 of 134. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1036.44~20.04.1 Fix: upgrade to 5.15.0-1036.44~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gke |
< 5.4.0-1102.109 Fix: upgrade to 5.4.0-1102.109
|
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 |
< 5.15.0-1036.41~20.04.1 Fix: upgrade to 5.15.0-1036.41~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop |
< 5.4.0-1071.75 Fix: upgrade to 5.4.0-1071.75
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 |
< 5.15.0-1022.27~20.04.1 Fix: upgrade to 5.15.0-1022.27~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-75.82~20.04.1 Fix: upgrade to 5.15.0-75.82~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1051.56 Fix: upgrade to 5.4.0-1051.56
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1033.38~20.04.1 Fix: upgrade to 5.15.0-1033.38~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1017.18 Fix: upgrade to 5.4.0-1017.18
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1093.99 Fix: upgrade to 5.4.0-1093.99
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-75.82~20.04.1 Fix: upgrade to 5.15.0-75.82~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1015.15~20.04.1 Fix: upgrade to 5.15.0-1015.15~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1103.112 Fix: upgrade to 5.4.0-1103.112
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1037.43~20.04.1 Fix: upgrade to 5.15.0-1037.43~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1088.99 Fix: upgrade to 5.4.0-1088.99
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1035.39~20.04.1 Fix: upgrade to 5.15.0-1035.39~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.4.0-1024.28 Fix: upgrade to 5.4.0-1024.28
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1104.112+fips1 Fix: upgrade to 5.4.0-1104.112+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1110.116+fips1 Fix: upgrade to 5.4.0-1110.116+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1079.88 Fix: upgrade to 5.4.0-1079.88
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1107.116+fips1 Fix: upgrade to 5.4.0-1107.116+fips1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-75.82 Fix: upgrade to 5.15.0-75.82
|
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1038.43 Fix: upgrade to 5.15.0-1038.43
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1040.47 Fix: upgrade to 5.15.0-1040.47
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1041.48.1 Fix: upgrade to 5.15.0-1041.48.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1036.44 Fix: upgrade to 5.15.0-1036.44
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1036.41 Fix: upgrade to 5.15.0-1036.41
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1022.27 Fix: upgrade to 5.15.0-1022.27
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 |
< 5.19.0-45.46~22.04.1 Fix: upgrade to 5.19.0-45.46~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1032.35 Fix: upgrade to 5.15.0-1032.35
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1033.38 Fix: upgrade to 5.15.0-1033.38
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1035.40 Fix: upgrade to 5.15.0-1035.40
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-75.82 Fix: upgrade to 5.15.0-75.82
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1027.27 Fix: upgrade to 5.15.0-1027.27
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1015.15 Fix: upgrade to 5.15.0-1015.15
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 |
< 6.1.0-1009.9 Fix: upgrade to 6.1.0-1009.9
|
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1037.43 Fix: upgrade to 5.15.0-1037.43
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1032.35 Fix: upgrade to 5.15.0-1032.35
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1019.21 Fix: upgrade to 5.15.0-1019.21
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1033.35 Fix: upgrade to 5.15.0-1033.35
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1040.45 Fix: upgrade to 5.15.0-1040.45
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Debian:12 | debian | linux |
< 6.1.20-1 Fix: upgrade to 6.1.20-1
|
| Debian:13 | debian | linux |
< 6.1.20-1 Fix: upgrade to 6.1.20-1
|
| Debian:14 | debian | linux |
< 6.1.20-1 Fix: upgrade to 6.1.20-1
|
| – | linux | linux_kernel |
< 6.3 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
Original advisory text
A flaw was found in the Linux kernel. A use-after-free may be triggered in asus_kbd_backlight_set when plugging/disconnecting in a malicious USB device, which advertises itself as an Asus device. S...
A flaw was found in the Linux kernel. A use-after-free may be triggered in asus_kbd_backlight_set when plugging/disconnecting in a malicious USB device, which advertises itself as an Asus device. Similarly to the previous known CVE-2023-25012, but in asus devices, the work_struct may be scheduled by the LED controller while the device is disconnecting, triggering a use-after-free on the struct asus_kbd_leds *led structure. A malicious USB device may exploit the issue to cause memory corruption with controlled data.
References
- https://ubuntu.com/security/notices/USN-6171-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6223-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6256-1 Vendor Advisory
- https://ubuntu.com/security/CVE-2023-1079 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-1079 Third Party Advisory
- https://ubuntu.com/security/notices/USN-6033-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6604-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6604-2 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-1079 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2023-1079 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6172-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6185-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6187-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6207-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6222-1 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=4... Mailing List Patch
- https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html
- https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-416Use After Free
Timeline
Published27 Mar 2023
Updated4 Nov 2026
First seen21 Aug 2026
Track software like this
Free during beta