A flaw was found in the Linux kernel. A use-after-free may be triggered in asus_kbd_backlight_set when plugging/disconnecting in a malicious USB device which advertises itself as an Asus device. Similarly to the previous known CVE-2023-25012 but in asus devices the work_struct may be scheduled by the LED controller while the device is disconnecting triggering a use-after-free on the struct asus_kbd_leds *led structure. A malicious USB device may exploit the issue to cause memory corruption with controlled data.

🗓️ 01 Apr 2023 07:00:00Reported by MicrosoftType

Linux kernel use-after-free in asus keyboard backlight via malicious USB Asus device disconnect causing memory corruption.

Reporter	Title	Published	Views	Family All 530
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management	12 Jan 202416:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway vulnerable to physical attacks and DoS.	17 Sep 202421:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by multiple open source vulnerabilities.	3 Aug 202400:43	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0079: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2023:0079)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 9 : kernel-5.14.0-347.el9	29 Feb 202400:00	–	nessus
Tenable Nessus	Debian dla-3403 : hyperv-daemons - security update	17 May 202300:00	–	nessus
Tenable Nessus	Debian dla-3404 : linux-config-5.10 - security update	17 May 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : kernel (EulerOS-SA-2023-1848)	13 May 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : kernel (EulerOS-SA-2023-1873)	13 May 202300:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.9.1 : kernel (EulerOS-SA-2023-1999)	2 Jun 202300:00	–	nessus