CVE-2023-52866

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

HID: uclogic: Fix user-memory-access bug in uclogic_params_ugee_v2_init_event_hooks()

When CONFIG_HID_UCLOGIC=y and CONFIG_KUNIT_ALL_TESTS=y, launch kernel and

then the below user-memory-access bug occurs.

In hid_test_uclogic_params_cleanup_event_hooks(),it call

uclogic_params_ugee_v2_init_event_hooks() with the first arg=NULL, so

when it calls uclogic_params_ugee_v2_has_battery(), the hid_get_drvdata()

will access hdev->dev with hdev=NULL, which will cause below

user-memory-access.

So add a fake_device with quirks member and call hid_set_drvdata()

to assign hdev->dev->driver_data which avoids the null-ptr-def bug

for drvdata->quirks in uclogic_params_ugee_v2_has_battery(). After applying

this patch, the below user-memory-access bug never occurs.

general protection fault, probably for non-canonical address 0xdffffc0000000329: 0000 [#1] PREEMPT SMP KASAN

KASAN: probably user-memory-access in range [0x000000000000

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References