CVE-2023-52840

Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()

State: Published
Severity: Not scored
Published: May 21, 2024
Updated: May 11, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()

The put_device() calls rmi_release_function() which frees "fn" so the dereference on the next line "fn->num_of_irqs" is a use after free. Move the put_device() to the end to fix this.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	24d28e4f1271cb2f91613dada8f2acccd00eff56 to before 2f236d8638f5b43e0c72919a6a27fe286c32053fAffected 24d28e4f1271cb2f91613dada8f2acccd00eff56 to before 50d12253666195a14c6cd2b81c376e2dbeedbdffAffected 24d28e4f1271cb2f91613dada8f2acccd00eff56 to before 6c71e065befb2fae8f1461559b940c04e1071bd5Affected 24d28e4f1271cb2f91613dada8f2acccd00eff56 to before 303766bb92c5c225cf40f9bbbe7e29749406e2f2Affected 24d28e4f1271cb2f91613dada8f2acccd00eff56 to before 7082b1fb5321037bc11ba1cf2d7ed23c6b2b521fAffected 24d28e4f1271cb2f91613dada8f2acccd00eff56 to before cc56c4d17721dcb10ad4e9c9266e449be1462683Affected 24d28e4f1271cb2f91613dada8f2acccd00eff56 to before c8e639f5743cf4b01f8c65e0df075fe4d782b585Affected 24d28e4f1271cb2f91613dada8f2acccd00eff56 to before eb988e46da2e4eae89f5337e047ce372fe33d5b1Affected
LinuxLinux	4.18Affected before 4.18Not affected 4.19.299 through 4.19.Not affected 5.4.261 through 5.4.Not affected 5.10.201 through 5.10.Not affected 5.15.139 through 5.15.Not affected 6.1.63 through 6.1.Not affected 6.5.12 through 6.5.Not affected 6.6.2 through 6.6.*Not affected 6.7 and laterNot affected

Product

Versions

LinuxLinux

24d28e4f1271cb2f91613dada8f2acccd00eff56 to before 2f236d8638f5b43e0c72919a6a27fe286c32053fAffected
24d28e4f1271cb2f91613dada8f2acccd00eff56 to before 50d12253666195a14c6cd2b81c376e2dbeedbdffAffected
24d28e4f1271cb2f91613dada8f2acccd00eff56 to before 6c71e065befb2fae8f1461559b940c04e1071bd5Affected
24d28e4f1271cb2f91613dada8f2acccd00eff56 to before 303766bb92c5c225cf40f9bbbe7e29749406e2f2Affected
24d28e4f1271cb2f91613dada8f2acccd00eff56 to before 7082b1fb5321037bc11ba1cf2d7ed23c6b2b521fAffected
24d28e4f1271cb2f91613dada8f2acccd00eff56 to before cc56c4d17721dcb10ad4e9c9266e449be1462683Affected
24d28e4f1271cb2f91613dada8f2acccd00eff56 to before c8e639f5743cf4b01f8c65e0df075fe4d782b585Affected
24d28e4f1271cb2f91613dada8f2acccd00eff56 to before eb988e46da2e4eae89f5337e047ce372fe33d5b1Affected

LinuxLinux

4.18Affected
before 4.18Not affected
4.19.299 through 4.19.*Not affected
5.4.261 through 5.4.*Not affected
5.10.201 through 5.10.*Not affected
5.15.139 through 5.15.*Not affected
6.1.63 through 6.1.*Not affected
6.5.12 through 6.5.*Not affected
6.6.2 through 6.6.*Not affected
6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.