In the Linux kernel, the following vulnerability has been resolved:

Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()

The put_device() calls rmi_release_function() which frees "fn" so the
dereference on the next line "fn->num_of_irqs" is a use after free.
Move the put_device() to the end to fix this.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00012.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
24d28e4f1271cb2f91613dada8f2acccd00eff56 affected
< 2f236d8638f5b43e0c72919a6a27fe286c32053f
24d28e4f1271cb2f91613dada8f2acccd00eff56 affected
< 50d12253666195a14c6cd2b81c376e2dbeedbdff
24d28e4f1271cb2f91613dada8f2acccd00eff56 affected
< 6c71e065befb2fae8f1461559b940c04e1071bd5
24d28e4f1271cb2f91613dada8f2acccd00eff56 affected
< 303766bb92c5c225cf40f9bbbe7e29749406e2f2
24d28e4f1271cb2f91613dada8f2acccd00eff56 affected
< 7082b1fb5321037bc11ba1cf2d7ed23c6b2b521f
24d28e4f1271cb2f91613dada8f2acccd00eff56 affected
< cc56c4d17721dcb10ad4e9c9266e449be1462683
24d28e4f1271cb2f91613dada8f2acccd00eff56 affected
< c8e639f5743cf4b01f8c65e0df075fe4d782b585
24d28e4f1271cb2f91613dada8f2acccd00eff56 affected
< eb988e46da2e4eae89f5337e047ce372fe33d5b1
Linux Linux affected
Version Status Constraints
4.18 affected
—
0 unaffected
< 4.18
4.19.299 unaffected
≤ 4.19.*
5.4.261 unaffected
≤ 5.4.*
5.10.201 unaffected
≤ 5.10.*
5.15.139 unaffected
≤ 5.15.*
6.1.63 unaffected
≤ 6.1.*
6.5.12 unaffected
≤ 6.5.*
6.6.2 unaffected
≤ 6.6.*
6.7 unaffected
≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
kernel-rt-0:4.18.0-553.22.1.rt7.363.el8_10 cpe:/a:redhat:enterprise_linux:8::nfv RHSA-2024:7001 2024-09-24T00:00:00Z
kernel-0:4.18.0-553.22.1.el8_10 cpe:/o:redhat:enterprise_linux:8 RHSA-2024:7000 2024-09-24T00:00:00Z
Red Hat Enterprise Linux 9
kernel-0:5.14.0-503.11.1.el9_5 cpe:/a:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z
kernel-0:5.14.0-503.11.1.el9_5 cpe:/o:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z
Red Hat Enterprise Linux 9.4 Extended Update Support
kernel-0:5.14.0-427.70.1.el9_4 cpe:/a:redhat:rhel_eus:9.4 RHSA-2025:8248 2025-05-28T00:00:00Z

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Redhat Subscribe
Enterprise Linux Subscribe
Rhel Eus Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/2f236d8638f5b43e0c72919a6a27fe286c32053f cve-icon cve-icon
https://git.kernel.org/stable/c/303766bb92c5c225cf40f9bbbe7e29749406e2f2 cve-icon cve-icon
https://git.kernel.org/stable/c/50d12253666195a14c6cd2b81c376e2dbeedbdff cve-icon cve-icon
https://git.kernel.org/stable/c/6c71e065befb2fae8f1461559b940c04e1071bd5 cve-icon cve-icon
https://git.kernel.org/stable/c/7082b1fb5321037bc11ba1cf2d7ed23c6b2b521f cve-icon cve-icon
https://git.kernel.org/stable/c/c8e639f5743cf4b01f8c65e0df075fe4d782b585 cve-icon cve-icon
https://git.kernel.org/stable/c/cc56c4d17721dcb10ad4e9c9266e449be1462683 cve-icon cve-icon
https://git.kernel.org/stable/c/eb988e46da2e4eae89f5337e047ce372fe33d5b1 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024052111-CVE-2023-52840-8a3d@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-52840 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-52840 cve-icon
History

Wed, 28 May 2025 17:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel Eus
CPEs cpe:/a:redhat:rhel_eus:9.4
Vendors & Products Redhat rhel Eus

Tue, 31 Dec 2024 20:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Thu, 19 Dec 2024 09:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 13 Nov 2024 02:30:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9

Tue, 24 Sep 2024 11:15:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:8

Tue, 24 Sep 2024 06:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:8::nfv
Vendors & Products Redhat
Redhat enterprise Linux

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T07:44:06.206Z

Reserved: 2024-05-21T15:19:24.253Z

Link: CVE-2023-52840

cve-icon Vulnrichment

Updated: 2024-08-02T23:11:36.065Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-21T16:15:21.377

Modified: 2024-12-31T19:48:59.990

Link: CVE-2023-52840

cve-icon Redhat

Severity : Low

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2023-52840 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses