CVE-2023-53253

In the Linux kernel, the following vulnerability has been resolved:

HID: nvidia-shield: Reference hid_device devm allocation of input_dev name

Use hid_device for devm allocation of the input_dev name to avoid a use-after-free. input_unregister_device would trigger devres cleanup of all resources associated with the input_dev, free-ing the name. The name would subsequently be used in a uevent fired at the end of unregistering the input_dev.

This vulnerability is rated as having a Moderate impact because exploitation is constrained to local environments and requires connecting or disconnecting specialized NVIDIA Shield peripheral devices, limiting the blast radius to a localized denial of service. Supported Red Hat Enterprise Linux releases are not affected by this flaw because the vulnerable driver code was never introduced into enterprise kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.