Vulnerability in Linux

CVE-2023-54084

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-digi00x: prevent potential use after free This code was supposed to return an error code if init_stream() failed, but it instead freed dg00x->rx_stream and returned success. This potentially leads to a use after free.

EPSS: 0.002 (8.7th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 9a08067ec318cbeaf0caa2d104cf677e723e02a3, 5.4, 0

References