Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2023-52840: Linux kernel synaptics driver may access freed memory
CVE-2023-52840 · published 2 years ago
Summary
The synaptics-rmi4 driver in certain Linux kernel packages can try to use data that has already been released, which may lead to system instability or crashes. This affects the Canonical Linux HWE Edge and AWS/Azure kernel builds listed. Updating to the latest kernel version that includes the fix resolves the issue.
What to do
- Update canonical linux-aws-5.4 to version 5.4.0-1120.130~18.04.1.
- Update canonical linux-azure-5.4 to version 5.4.0-1126.133~18.04.1.
- Update canonical linux-gcp-5.4 to version 5.4.0-1124.133~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-173.191~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1067.72~18.04.1.
- Update canonical linux-oracle-5.4 to version 5.4.0-1119.128~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1104.116~18.04.1.
- Update canonical linux to version 5.4.0-173.191.
- Update canonical linux-aws to version 5.4.0-1120.130.
- Update canonical linux-aws-5.15 to version 5.15.0-1056.61~20.04.1.
- Update canonical linux-azure to version 5.4.0-1126.133.
- Update canonical linux-azure-5.15 to version 5.15.0-1058.66~20.04.2.
- Update canonical linux-bluefield to version 5.4.0-1080.87.
- Update canonical linux-gcp to version 5.4.0-1124.133.
- Update canonical linux-gcp-5.15 to version 5.15.0-1053.61~20.04.1.
- Update canonical linux-gkeop to version 5.4.0-1087.91.
- Update canonical linux-gkeop-5.15 to version 5.15.0-1038.44~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-100.110~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1067.72.
- Update canonical linux-ibm-5.15 to version 5.15.0-1048.51~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1050.56~20.04.1.
- Update canonical linux-iot to version 5.4.0-1032.33.
- Update canonical linux-kvm to version 5.4.0-1108.115.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-100.110~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1025.25~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1119.128.
- Update canonical linux-oracle-5.15 to version 5.15.0-1053.59~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1104.116.
- Update canonical linux-riscv-5.15 to version 5.15.0-1051.55~20.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.4.0-1039.43.
- Update canonical linux-aws-fips to version 5.4.0-1120.130+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1126.133+fips1.
- Update canonical linux-fips to version 5.4.0-1094.104.
- Update canonical linux-gcp-fips to version 5.4.0-1124.133+fips1.
- Update canonical linux to version 5.15.0-100.110.
- Update canonical linux-aws to version 5.15.0-1056.61.
- Update canonical linux-azure to version 5.15.0-1058.66.
- Update canonical linux-azure-fde to version 5.15.0-1058.66.1.
- Update canonical linux-gcp to version 5.15.0-1053.61.
- Update canonical linux-gke to version 5.15.0-1052.57.
- Update canonical linux-gkeop to version 5.15.0-1038.44.
- Update canonical linux-ibm to version 5.15.0-1048.51.
- Update canonical linux-intel-iotg to version 5.15.0-1050.56.
- Update canonical linux-kvm to version 5.15.0-1052.57.
- Update canonical linux-lowlatency to version 5.15.0-100.110.
- Update canonical linux-nvidia to version 5.15.0-1046.46.
- Update canonical linux-nvidia-6.5 to version 6.5.0-1014.14.
- Update canonical linux-nvidia-tegra to version 5.15.0-1025.25.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1012.12.
- Update canonical linux-oracle to version 5.15.0-1053.59.
- Update canonical linux-raspi to version 5.15.0-1048.51.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1030.34.
- Update canonical linux-bluefield to version 5.15.0-1037.39.
- Update canonical linux-aws-fips to version 5.15.0-1056.61+fips1.
- Update canonical linux-fips to version 5.15.0-100.110+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1055.63+fips2.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1048.50.
- Update canonical linux-realtime to version 5.15.0-1056.63.
- Update debian linux to version 6.1.64-1.
- Update debian linux to version 6.6.8-1.
- Update linux kernel to version 6.6.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1120.130~18.04.1 Fix: upgrade to 5.4.0-1120.130~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1126.133~18.04.1 Fix: upgrade to 5.4.0-1126.133~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1124.133~18.04.1 Fix: upgrade to 5.4.0-1124.133~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-173.191~18.04.1 Fix: upgrade to 5.4.0-173.191~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1067.72~18.04.1 Fix: upgrade to 5.4.0-1067.72~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1119.128~18.04.1 Fix: upgrade to 5.4.0-1119.128~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1104.116~18.04.1 Fix: upgrade to 5.4.0-1104.116~18.04.1
|
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-173.191 Fix: upgrade to 5.4.0-173.191
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1120.130 Fix: upgrade to 5.4.0-1120.130
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1056.61~20.04.1 Fix: upgrade to 5.15.0-1056.61~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1126.133 Fix: upgrade to 5.4.0-1126.133
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1058.66~20.04.2 Fix: upgrade to 5.15.0-1058.66~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1080.87 Fix: upgrade to 5.4.0-1080.87
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1124.133 Fix: upgrade to 5.4.0-1124.133
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1053.61~20.04.1 Fix: upgrade to 5.15.0-1053.61~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop |
< 5.4.0-1087.91 Fix: upgrade to 5.4.0-1087.91
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 |
< 5.15.0-1038.44~20.04.1 Fix: upgrade to 5.15.0-1038.44~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-100.110~20.04.1 Fix: upgrade to 5.15.0-100.110~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1067.72 Fix: upgrade to 5.4.0-1067.72
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1048.51~20.04.1 Fix: upgrade to 5.15.0-1048.51~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1050.56~20.04.1 Fix: upgrade to 5.15.0-1050.56~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1032.33 Fix: upgrade to 5.4.0-1032.33
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1108.115 Fix: upgrade to 5.4.0-1108.115
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-100.110~20.04.1 Fix: upgrade to 5.15.0-100.110~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1025.25~20.04.1 Fix: upgrade to 5.15.0-1025.25~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1119.128 Fix: upgrade to 5.4.0-1119.128
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1053.59~20.04.1 Fix: upgrade to 5.15.0-1053.59~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1104.116 Fix: upgrade to 5.4.0-1104.116
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1051.55~20.04.1 Fix: upgrade to 5.15.0-1051.55~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.4.0-1039.43 Fix: upgrade to 5.4.0-1039.43
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
Showing 50 of 149. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1120.130+fips1 Fix: upgrade to 5.4.0-1120.130+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1126.133+fips1 Fix: upgrade to 5.4.0-1126.133+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1094.104 Fix: upgrade to 5.4.0-1094.104
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1124.133+fips1 Fix: upgrade to 5.4.0-1124.133+fips1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-100.110 Fix: upgrade to 5.15.0-100.110
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1056.61 Fix: upgrade to 5.15.0-1056.61
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1058.66 Fix: upgrade to 5.15.0-1058.66
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1058.66.1 Fix: upgrade to 5.15.0-1058.66.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1053.61 Fix: upgrade to 5.15.0-1053.61
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1052.57 Fix: upgrade to 5.15.0-1052.57
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1038.44 Fix: upgrade to 5.15.0-1038.44
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1048.51 Fix: upgrade to 5.15.0-1048.51
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1050.56 Fix: upgrade to 5.15.0-1050.56
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1052.57 Fix: upgrade to 5.15.0-1052.57
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-100.110 Fix: upgrade to 5.15.0-100.110
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1046.46 Fix: upgrade to 5.15.0-1046.46
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 |
< 6.5.0-1014.14 Fix: upgrade to 6.5.0-1014.14
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1025.25 Fix: upgrade to 5.15.0-1025.25
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1012.12 Fix: upgrade to 5.15.0-1012.12
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1053.59 Fix: upgrade to 5.15.0-1053.59
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1048.51 Fix: upgrade to 5.15.0-1048.51
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1030.34 Fix: upgrade to 5.15.0-1030.34
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1037.39 Fix: upgrade to 5.15.0-1037.39
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1056.61+fips1 Fix: upgrade to 5.15.0-1056.61+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-100.110+fips1 Fix: upgrade to 5.15.0-100.110+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1055.63+fips2 Fix: upgrade to 5.15.0-1055.63+fips2
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1048.50 Fix: upgrade to 5.15.0-1048.50
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1056.63 Fix: upgrade to 5.15.0-1056.63
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-7.0 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Debian:12 | debian | linux |
< 6.1.64-1 Fix: upgrade to 6.1.64-1
|
| Debian:13 | debian | linux |
< 6.6.8-1 Fix: upgrade to 6.6.8-1
|
| – | linux | linux_kernel |
>= 4.18, < 4.19.299 >= 4.20, < 5.4.261 >= 5.5, < 5.10.201 >= 5.11, < 5.15.139 >= 5.16, < 6.1.63 >= 6.2, < 6.5.12 >= 6.6, < 6.6.2 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Linux | linux | kernel |
>= 6.6.0, < 6.6.2 Fix: upgrade to 6.6.2
|
Original advisory text
Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() The put_device() calls rmi_release_function() which frees "fn" so the dereference on the next line "fn->num_of_irqs" is a use after free. Move the put_device() to the end to fix this.
References
- https://nvd.nist.gov/vuln/detail/CVE-2023-52840 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52840... Vendor Advisory
- https://ubuntu.com/security/CVE-2023-52840 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-52840 Third Party Advisory
- https://git.kernel.org/linus/eb988e46da2e4eae89f5337e047ce372fe33d5b1 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2023-52840 Vendor Advisory
- https://git.kernel.org/stable/c/2f236d8638f5b43e0c72919a6a27fe286c32053f Third Party Advisory
- https://git.kernel.org/stable/c/eb988e46da2e4eae89f5337e047ce372fe33d5b1 Third Party Advisory
- https://git.kernel.org/stable/c/50d12253666195a14c6cd2b81c376e2dbeedbdff Third Party Advisory
- https://git.kernel.org/stable/c/6c71e065befb2fae8f1461559b940c04e1071bd5 Third Party Advisory
- https://git.kernel.org/stable/c/303766bb92c5c225cf40f9bbbe7e29749406e2f2 Third Party Advisory
- https://git.kernel.org/stable/c/7082b1fb5321037bc11ba1cf2d7ed23c6b2b521f Third Party Advisory
- https://git.kernel.org/stable/c/cc56c4d17721dcb10ad4e9c9266e449be1462683 Third Party Advisory
- https://git.kernel.org/stable/c/c8e639f5743cf4b01f8c65e0df075fe4d782b585 Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-416Use After Free
Timeline
Published21 May 2024
Updated4 Nov 2026
First seen11 Mar 2026
Sources
CVE-2023-52840 · OSV
CVE-2023-52840 · NVD
UBUNTU-CVE-2023-52840 · OSV
DEBIAN-CVE-2023-52840 · OSV
Track software like this
Free during beta