CVE-2023-53759
Description
In the Linux kernel, the following vulnerability has been resolved: HID: hidraw: fix data race on device refcount The hidraw_open() function increments the hidraw device reference counter. The counter has no dedicated synchronization mechanism, resulting in a potential data race when concurrently opening a device. The race is a regression introduced by commit 8590222e4b02 ("HID: hidraw: Replace hidraw device table mutex with a rwsem"). While minors_rwsem is intended to protect the hidraw_table itself, by instead acquiring the lock for writing, the reference counter is also protected. This is symmetrical to hidraw_release().
How to fix
- Linux Linux879e79c3aead41b8aa2e91164354b30bd1c4ef3b, ff348eabd97577da974d3db7038857f28c61d2bd, 05b47034e2488c2924e5c032e20a1979d012b5b5, 944ee77dc6ec7b0afd8ec70ffc418b238c92f12b or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 8590222e4b021054a7167a4dd35b152a8ed7018e ≤ v < 879e79c3aead41b8aa2e91164354b30bd1c4ef3b, 8590222e4b021054a7167a4dd35b152a8ed7018e ≤ v < ff348eabd97577da974d3db7038857f28c61d2bd, 8590222e4b021054a7167a4dd35b152a8ed7018e ≤ v < 05b47034e2488c2924e5c032e20a1979d012b5b5, 8590222e4b021054a7167a4dd35b152a8ed7018e ≤ v < 944ee77dc6ec7b0afd8ec70ffc418b238c92f12b, 5.17 | 879e79c3aead41b8aa2e91164354b30bd1c4ef3b, ff348eabd97577da974d3db7038857f28c61d2bd, 05b47034e2488c2924e5c032e20a1979d012b5b5, 944ee77dc6ec7b0afd8ec70ffc418b238c92f12b |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.