Back to bug 2221700

Who When What Removed Added
Mauro Matteo Cascella 2023-07-10 15:34:20 UTC Fixed In Version kernel 6.5-rc1
Mauro Matteo Cascella 2023-07-10 15:49:24 UTC Depends On 2221710, 2221708
Mauro Matteo Cascella 2023-08-03 09:49:50 UTC Depends On 2228792
Mauro Matteo Cascella 2023-08-03 09:51:18 UTC Alias CVE-2023-4134
Summary TRIAGE kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work() CVE-2023-4134 kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()
Product Security DevOps Team 2023-08-03 15:01:50 UTC Status NEW CLOSED
Resolution --- NOTABUG
Last Closed 2023-08-03 15:01:50 UTC
Mauro Matteo Cascella 2023-08-03 19:23:39 UTC Doc Text A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel. The bug occurs in the device cleanup routine due to a possible rearming of the watchdog_timer from the workqueue. This flaw could allow a local user to crash the system, causing a denial of service condition.
Paige Jung 2023-08-03 21:09:41 UTC Doc Text A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel. The bug occurs in the device cleanup routine due to a possible rearming of the watchdog_timer from the workqueue. This flaw could allow a local user to crash the system, causing a denial of service condition. A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel. This issue occurs in the device cleanup routine due to a possible rearming of the watchdog_timer from the workqueue. This could allow a local user to crash the system, causing a denial of service.

Back to bug 2221700