{"id":"CVE-2023-54207","state":"PUBLISHED","title":"HID: uclogic: Correct devm device reference for hidinput input_dev name","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: uclogic: Correct devm device reference for hidinput input_dev name\n\nReference the HID device rather than the input device for the devm\nallocation of the input_dev name. Referencing the input_dev would lead to a\nuse-after-free when the input_dev was unregistered and subsequently fires a\nuevent that depends on the name. At the point of firing the uevent, the\nname would be freed by devres management.\n\nUse devm_kasprintf to simplify the logic for allocating memory and\nformatting the input_dev name string.","publishedAt":"2025-12-30T12:11:06.643Z","updatedAt":"2026-06-11T18:44:16.426Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"cce2dbdf258e6b27b2b100f511531edabb77f427","status":"affected","lessThan":"f78bb490b16ecb506d4904be4b00bf9aad6588f9","versionType":"git"},{"version":"cce2dbdf258e6b27b2b100f511531edabb77f427","status":"affected","lessThan":"51f49e3927ad545cec0c0afb86856ccacd9f085d","versionType":"git"},{"version":"cce2dbdf258e6b27b2b100f511531edabb77f427","status":"affected","lessThan":"f283805d984343b2f216e2f4c6c7af265b9542ae","versionType":"git"},{"version":"cce2dbdf258e6b27b2b100f511531edabb77f427","status":"affected","lessThan":"4c2707dfee5847dc0b5ecfbe512c29c93832fdc4","versionType":"git"},{"version":"cce2dbdf258e6b27b2b100f511531edabb77f427","status":"affected","lessThan":"58f0d1c0e494a88f301bf455da7df4366f179bbb","versionType":"git"},{"version":"cce2dbdf258e6b27b2b100f511531edabb77f427","status":"affected","lessThan":"dd613a4e45f8d35f49a63a2064e5308fa5619e29","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/hid/hid-uclogic-core.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.1","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.1","versionType":"semver"},{"version":"5.10.249","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.199","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.53","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.4.16","status":"unaffected","lessThanOrEqual":"6.4.*","versionType":"semver"},{"version":"6.5.3","status":"unaffected","lessThanOrEqual":"6.5.*","versionType":"semver"},{"version":"6.6","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/hid/hid-uclogic-core.c"]}],"references":["https://git.kernel.org/stable/c/f78bb490b16ecb506d4904be4b00bf9aad6588f9","https://git.kernel.org/stable/c/51f49e3927ad545cec0c0afb86856ccacd9f085d","https://git.kernel.org/stable/c/f283805d984343b2f216e2f4c6c7af265b9542ae","https://git.kernel.org/stable/c/4c2707dfee5847dc0b5ecfbe512c29c93832fdc4","https://git.kernel.org/stable/c/58f0d1c0e494a88f301bf455da7df4366f179bbb","https://git.kernel.org/stable/c/dd613a4e45f8d35f49a63a2064e5308fa5619e29"],"weaknesses":[],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/54xxx/CVE-2023-54207.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-54207","state":"PUBLISHED","datePublished":"2025-12-30T12:11:06.643Z","dateUpdated":"2026-06-11T18:44:16.426Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-12-30T12:06:44.500Z"},"containers":{"cna":{"title":"HID: uclogic: Correct devm device reference for hidinput input_dev name","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: uclogic: Correct devm device reference for hidinput input_dev name\n\nReference the HID device rather than the input device for the devm\nallocation of the input_dev name. Referencing the input_dev would lead to a\nuse-after-free when the input_dev was unregistered and subsequently fires a\nuevent that depends on the name. At the point of firing the uevent, the\nname would be freed by devres management.\n\nUse devm_kasprintf to simplify the logic for allocating memory and\nformatting the input_dev name string."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"cce2dbdf258e6b27b2b100f511531edabb77f427","status":"affected","lessThan":"f78bb490b16ecb506d4904be4b00bf9aad6588f9","versionType":"git"},{"version":"cce2dbdf258e6b27b2b100f511531edabb77f427","status":"affected","lessThan":"51f49e3927ad545cec0c0afb86856ccacd9f085d","versionType":"git"},{"version":"cce2dbdf258e6b27b2b100f511531edabb77f427","status":"affected","lessThan":"f283805d984343b2f216e2f4c6c7af265b9542ae","versionType":"git"},{"version":"cce2dbdf258e6b27b2b100f511531edabb77f427","status":"affected","lessThan":"4c2707dfee5847dc0b5ecfbe512c29c93832fdc4","versionType":"git"},{"version":"cce2dbdf258e6b27b2b100f511531edabb77f427","status":"affected","lessThan":"58f0d1c0e494a88f301bf455da7df4366f179bbb","versionType":"git"},{"version":"cce2dbdf258e6b27b2b100f511531edabb77f427","status":"affected","lessThan":"dd613a4e45f8d35f49a63a2064e5308fa5619e29","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/hid/hid-uclogic-core.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.1","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.1","versionType":"semver"},{"version":"5.10.249","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.199","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.53","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.4.16","status":"unaffected","lessThanOrEqual":"6.4.*","versionType":"semver"},{"version":"6.5.3","status":"unaffected","lessThanOrEqual":"6.5.*","versionType":"semver"},{"version":"6.6","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/hid/hid-uclogic-core.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/f78bb490b16ecb506d4904be4b00bf9aad6588f9"},{"url":"https://git.kernel.org/stable/c/51f49e3927ad545cec0c0afb86856ccacd9f085d"},{"url":"https://git.kernel.org/stable/c/f283805d984343b2f216e2f4c6c7af265b9542ae"},{"url":"https://git.kernel.org/stable/c/4c2707dfee5847dc0b5ecfbe512c29c93832fdc4"},{"url":"https://git.kernel.org/stable/c/58f0d1c0e494a88f301bf455da7df4366f179bbb"},{"url":"https://git.kernel.org/stable/c/dd613a4e45f8d35f49a63a2064e5308fa5619e29"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T19:57:32.385Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","versionEndExcluding":"5.10.249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","versionEndExcluding":"5.15.199"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","versionEndExcluding":"6.1.53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","versionEndExcluding":"6.4.16"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","versionEndExcluding":"6.5.3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","versionEndExcluding":"6.6"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-54207","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-06-10T20:41:48.871792Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-06-11T18:44:16.426Z"}}]}}}