CVE-2023-52478

Summary

CVE-2023-52478 is a vulnerability affecting the Linux kernel's Logitech HIDPP driver. The issue involves a TOCTOU race condition in the function `hidpp_connect_event()`, which can lead to two threads taking turns managing the same battery's power supply registration. When the receiver is disconnected from the USB, one power supply gets unregistered, freeing the memory used for its description properties. The other power supply's registration then attempts to use the freed memory, resulting in a use-after-free scenario and a kernel panic. This vulnerability can lead to unintended system behavior and potential denial-of-service attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.