CVE-2023-1073

CVSS V2 None CVSS V3 None
Description
A memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem in how a user inserts a malicious USB device. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Overview
  • CVE ID
  • CVE-2023-1073
  • Assigner
  • secalert@redhat.com
  • Vulnerability Status
  • Modified
  • Published Version
  • 2023-03-27T21:15:10
  • Last Modified Date
  • 2023-05-03T14:15:19
Weakness Enumerations
CWE URL
CWE-787 http://cwe.mitre.org/data/definitions/787.html
CWE-119 http://cwe.mitre.org/data/definitions/119.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* 1 OR
References
Reference URL Reference Tags
https://bugzilla.redhat.com/show_bug.cgi?id=2173403 Issue Tracking Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/id=b12fece4c64857e5fab4290bf01b2e0317a88456 Mailing List Patch
https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html
https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-1073
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1073
History
Created Old Value New Value Data Type Notes
2023-04-17 03:33:48 Added to TrackCVE
2023-04-17 03:33:51 Weakness Enumeration new
2023-05-03 02:01:53 2023-05-03T01:15:10 CVE Modified Date updated
2023-05-03 02:01:53 Analyzed Modified Vulnerability Status updated
2023-05-03 02:02:06 References updated
2023-05-03 15:03:37 2023-05-03T14:15:19 CVE Modified Date updated
2023-05-03 15:03:48 References updated