Riskcovery

CVE-2023-53253

HID: nvidia-shield: Reference hid_device devm allocation of input_dev name

State
Published
Severity
8.8 High
Published
Sep 15, 2025
Updated
Aug 5, 2026
Reserved
Sep 15, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: nvidia-shield: Reference hid_device devm allocation of input_dev name

Use hid_device for devm allocation of the input_dev name to avoid a use-after-free. input_unregister_device would trigger devres cleanup of all resources associated with the input_dev, free-ing the name. The name would subsequently be used in a uevent fired at the end of unregistering the input_dev.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 09308562d4afb1abc66366608fa1cb9de783272f to before b85d3807e5ec368bfd5b20245347d7c1434aff76Affected
  • 09308562d4afb1abc66366608fa1cb9de783272f to before 197d3143520fec9fde89aebabc9f0d7464f08e50Affected
LinuxLinux
  • 6.5Affected
  • before 6.5Not affected
  • 6.5.3 through 6.5.*Not affected
  • 6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.