medium5.5
CVE-2023-4134
A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel.
Impact
A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel. This issue occurs in the device cleanup routine due to a possible rearming of the watchdog_timer from the workqueue. This could allow a local user to crash the system, causing a denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | before 6.5 |
| Fedoraproject | Fedora | Version 38 |