Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2023-35828 Details

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7 HIGHVector:CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CNA: CISA-ADPCVSS-B:7 HIGHVector:CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2	CVE	Release NotesVendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2b947f8769be8b8181dc795fd292d3e7120f5204	CVE	Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html	CVE	Third Party AdvisoryVDB Entry
https://lore.kernel.org/all/20230327121700.52d881e0%40canb.auug.org.au/	CVE	Mailing ListThird Party Advisory
https://lore.kernel.org/lkml/CAJedcCwkuznS1kSTvJXhzPoavcZDWNhNMshi-Ux0spSVRwU=RA%40mail.gmail.com/T/	CVE	Mailing ListPatchThird Party Advisory
https://security.netapp.com/advisory/ntap-20230803-0002/	CVE	Third Party AdvisoryVDB Entry
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2	[email protected]	Release NotesVendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2b947f8769be8b8181dc795fd292d3e7120f5204	[email protected]	Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html	[email protected]	Third Party AdvisoryVDB Entry
https://lore.kernel.org/all/20230327121700.52d881e0%40canb.auug.org.au/	[email protected]	Mailing ListThird Party Advisory
https://lore.kernel.org/lkml/CAJedcCwkuznS1kSTvJXhzPoavcZDWNhNMshi-Ux0spSVRwU=RA%40mail.gmail.com/T/	[email protected]	Mailing ListPatchThird Party Advisory
https://security.netapp.com/advisory/ntap-20230803-0002/	[email protected]	Third Party AdvisoryVDB Entry

CWE-ID	CWE Name	Source
CWE-362	Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')	[email protected]
CWE-416	Use After Free	[email protected]
CWE-362	Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')	CISA-ADP
CWE-416	Use After Free	CISA-ADP

Product	Versions
linux linux kernel	>= 4.19, < 4.19.283 >= 4.20, < 5.4.243 >= 5.5, < 5.10.180 >= 5.11, < 5.15.111 >= 5.16, < 6.1.28
CPE cpe:2.3:o:linux:linux_kernel:::::::: Remediation No remediation found in references.
netapp h300s	All versions
CPE cpe:2.3:h:netapp:h300s:-:::::::* Remediation No remediation found in references.
netapp h410c	All versions
CPE cpe:2.3:h:netapp:h410c:-:::::::* Remediation No remediation found in references.
netapp h410s	All versions
CPE cpe:2.3:h:netapp:h410s:-:::::::* Remediation No remediation found in references.
netapp h500s	All versions
CPE cpe:2.3:h:netapp:h500s:-:::::::* Remediation No remediation found in references.
netapp h700s	All versions
CPE cpe:2.3:h:netapp:h700s:-:::::::* Remediation No remediation found in references.

10 change records found show changes

QUICK INFO