CVE-2023-53797

Summary

In the Linux kernel, the following vulnerability has been resolved:

HID: wacom: Use ktime_t rather than int when dealing with timestamps

Code which interacts with timestamps needs to use the ktime_t type returned by functions like ktime_get. The int type does not offer enough space to store these values, and attempting to use it is a recipe for problems. In this particular case, overflows would occur when calculating/storing timestamps leading to incorrect values being reported to userspace. In some cases these bad timestamps cause input handling in userspace to appear hung.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxf9e27d4bdb1fe257c1453d02560e3adc3e5b6023 < 99036f1aed7e82773904f5d91a9897bb3e507fd9affected
LinuxLinux4502ebbdc0e21e44a8a706428e420ae9c1bb9bba < 9598a647ecc8f300b0540abf9d3b3439859d163baffected
LinuxLinux5047a228d4c8e2b5d1b856f21a00ecf717945a9c < 67ce7724637c6adb66f788677cb50b82615de0acaffected
LinuxLinuxfb98336e23c11e9c8c7dd5425ec71adbbef7f773 < d89750b19681581796dfbe3689bbb5d439b99b24affected
LinuxLinux694d3e4387bfa69925e075053894385351106e64 < bdeaa883b765709f231f47f9d6cc76c837a15396affected
LinuxLinux17d793f3ed53080dab6bbeabfc82de890c901001 < d0198363f9108e4adb2511e607ba91e44779e8b1affected
LinuxLinux17d793f3ed53080dab6bbeabfc82de890c901001 < 9a6c0e28e215535b2938c61ded54603b4e5814c5affected
LinuxLinux82a136c35506dc788a6c03ffeb11b10c907b0e26affected
LinuxLinux5.4.243 < 5.4.251affected
LinuxLinux5.10.180 < 5.10.188affected
LinuxLinux5.15.112 < 5.15.120affected
LinuxLinux6.1.29 < 6.1.37affected
LinuxLinux6.3.3 < 6.3.11affected
LinuxLinux6.2.16 < 6.3affected
LinuxLinux6.4affected
LinuxLinux0 < 6.4unaffected
LinuxLinux5.4.251 <= 5.4.*unaffected
LinuxLinux5.10.188 <= 5.10.*unaffected
LinuxLinux5.15.120 <= 5.15.*unaffected
LinuxLinux6.1.37 <= 6.1.*unaffected
LinuxLinux6.3.11 <= 6.3.*unaffected
LinuxLinux6.4.1 <= 6.4.*unaffected
LinuxLinux6.5 <= *unaffected

Weaknesses

References