CVE-2023-1073 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-1073 Interim 1 13 2023-07-11T23:19:26Z current 2023-03-01T00:16:31Z 2023-07-11T23:19:26Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-1073 A memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem in how a user inserts a malicious USB device. This flaw allows a local user to crash or potentially escalate their privileges on the system. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 SUSE Linux Enterprise High Availability Extension 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Live Patching 15 SP5 SUSE Linux Enterprise Real Time 15 SP3 SUSE Real Time Module 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 cluster-md-kmp-default cluster-md-kmp-rt dlm-kmp-default dlm-kmp-rt gfs2-kmp-default gfs2-kmp-rt kernel-64kb kernel-64kb-devel kernel-azure kernel-azure-devel kernel-default kernel-default-devel kernel-default-extra kernel-default-livepatch kernel-default-livepatch-devel kernel-devel kernel-devel-azure kernel-devel-rt kernel-docs kernel-macros kernel-obs-build kernel-preempt kernel-preempt-devel kernel-rt kernel-rt-devel kernel-rt-vdso kernel-rt_debug kernel-rt_debug-devel kernel-rt_debug-vdso kernel-source kernel-source-azure kernel-source-rt kernel-syms kernel-syms-azure kernel-syms-rt kernel-zfcpdump ocfs2-kmp-default ocfs2-kmp-rt reiserfs-kmp-default kernel-preempt as a component of SUSE Enterprise Storage 7.1 kernel-preempt-devel as a component of SUSE Enterprise Storage 7.1 cluster-md-kmp-default as a component of SUSE Linux Enterprise High Availability Extension 15 SP5 dlm-kmp-default as a component of SUSE Linux Enterprise High Availability Extension 15 SP5 gfs2-kmp-default as a component of SUSE Linux Enterprise High Availability Extension 15 SP5 ocfs2-kmp-default as a component of SUSE Linux Enterprise High Availability Extension 15 SP5 kernel-default as a component of SUSE Linux Enterprise High Availability Extension 15 SP5 kernel-preempt as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kernel-preempt-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kernel-preempt as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-preempt-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default-livepatch as a component of SUSE Linux Enterprise Live Patching 15 SP5 kernel-default-livepatch-devel as a component of SUSE Linux Enterprise Live Patching 15 SP5 kernel-default as a component of SUSE Linux Enterprise Live Patching 15 SP5 kernel-64kb as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-64kb-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-default as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-default-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-macros as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-source as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-zfcpdump as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-default as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 kernel-docs as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 kernel-obs-build as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 kernel-source as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 kernel-syms as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 reiserfs-kmp-default as a component of SUSE Linux Enterprise Module for Legacy 15 SP5 kernel-default as a component of SUSE Linux Enterprise Module for Legacy 15 SP5 kernel-azure as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP5 kernel-azure-devel as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP5 kernel-devel-azure as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP5 kernel-source-azure as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP5 kernel-syms-azure as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP5 kernel-preempt as a component of SUSE Linux Enterprise Real Time 15 SP3 kernel-preempt-devel as a component of SUSE Linux Enterprise Real Time 15 SP3 kernel-default-extra as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 kernel-default as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 kernel-preempt as a component of SUSE Manager Proxy 4.2 kernel-preempt as a component of SUSE Manager Retail Branch Server 4.2 cluster-md-kmp-rt as a component of SUSE Real Time Module 15 SP5 dlm-kmp-rt as a component of SUSE Real Time Module 15 SP5 gfs2-kmp-rt as a component of SUSE Real Time Module 15 SP5 kernel-rt as a component of SUSE Real Time Module 15 SP5 kernel-rt-devel as a component of SUSE Real Time Module 15 SP5 kernel-rt-vdso as a component of SUSE Real Time Module 15 SP5 ocfs2-kmp-rt as a component of SUSE Real Time Module 15 SP5 kernel-rt_debug as a component of SUSE Real Time Module 15 SP5 kernel-rt_debug-devel as a component of SUSE Real Time Module 15 SP5 kernel-rt_debug-vdso as a component of SUSE Real Time Module 15 SP5 kernel-devel-rt as a component of SUSE Real Time Module 15 SP5 kernel-source-rt as a component of SUSE Real Time Module 15 SP5 kernel-syms-rt as a component of SUSE Real Time Module 15 SP5 A memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem in how a user inserts a malicious USB device. This flaw allows a local user to crash or potentially escalate their privileges on the system. CVE-2023-1073 SUSE Enterprise Storage 7.1:kernel-preempt SUSE Enterprise Storage 7.1:kernel-preempt-devel SUSE Linux Enterprise High Availability Extension 15 SP5:cluster-md-kmp-default SUSE Linux Enterprise High Availability Extension 15 SP5:dlm-kmp-default SUSE Linux Enterprise High Availability Extension 15 SP5:gfs2-kmp-default SUSE Linux Enterprise High Availability Extension 15 SP5:kernel-default SUSE Linux Enterprise High Availability Extension 15 SP5:ocfs2-kmp-default SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:kernel-preempt SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:kernel-preempt-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-preempt SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-preempt-devel SUSE Linux Enterprise Live Patching 15 SP5:kernel-default SUSE Linux Enterprise Live Patching 15 SP5:kernel-default-livepatch SUSE Linux Enterprise Live Patching 15 SP5:kernel-default-livepatch-devel SUSE Linux Enterprise Module for Basesystem 15 SP5:kernel-64kb SUSE Linux Enterprise Module for Basesystem 15 SP5:kernel-64kb-devel SUSE Linux Enterprise Module for Basesystem 15 SP5:kernel-default SUSE Linux Enterprise Module for Basesystem 15 SP5:kernel-default-devel SUSE Linux Enterprise Module for Basesystem 15 SP5:kernel-devel SUSE Linux Enterprise Module for Basesystem 15 SP5:kernel-macros SUSE Linux Enterprise Module for Basesystem 15 SP5:kernel-source SUSE Linux Enterprise Module for Basesystem 15 SP5:kernel-zfcpdump SUSE Linux Enterprise Module for Development Tools 15 SP5:kernel-default SUSE Linux Enterprise Module for Development Tools 15 SP5:kernel-docs SUSE Linux Enterprise Module for Development Tools 15 SP5:kernel-obs-build SUSE Linux Enterprise Module for Development Tools 15 SP5:kernel-source SUSE Linux Enterprise Module for Development Tools 15 SP5:kernel-syms SUSE Linux Enterprise Module for Legacy 15 SP5:kernel-default SUSE Linux Enterprise Module for Legacy 15 SP5:reiserfs-kmp-default SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure SUSE Linux Enterprise Real Time 15 SP3:kernel-preempt SUSE Linux Enterprise Real Time 15 SP3:kernel-preempt-devel SUSE Linux Enterprise Workstation Extension 15 SP5:kernel-default SUSE Linux Enterprise Workstation Extension 15 SP5:kernel-default-extra SUSE Manager Proxy 4.2:kernel-preempt SUSE Manager Retail Branch Server 4.2:kernel-preempt SUSE Real Time Module 15 SP5:cluster-md-kmp-rt SUSE Real Time Module 15 SP5:dlm-kmp-rt SUSE Real Time Module 15 SP5:gfs2-kmp-rt SUSE Real Time Module 15 SP5:kernel-devel-rt SUSE Real Time Module 15 SP5:kernel-rt SUSE Real Time Module 15 SP5:kernel-rt-devel SUSE Real Time Module 15 SP5:kernel-rt-vdso SUSE Real Time Module 15 SP5:kernel-rt_debug SUSE Real Time Module 15 SP5:kernel-rt_debug-devel SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso SUSE Real Time Module 15 SP5:kernel-source-rt SUSE Real Time Module 15 SP5:kernel-syms-rt SUSE Real Time Module 15 SP5:ocfs2-kmp-rt moderate 6.3 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H