CVE-2023-35828

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362 CWE-416

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2Release Notes, Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2b947f8769be8b8181dc795fd292d3e7120f5204Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/07/msg00030.htmlThird Party Advisory, VDB Entry
https://lore.kernel.org/all/20230327121700.52d881e0%40canb.auug.org.au/Mailing List, Third Party Advisory
https://lore.kernel.org/lkml/CAJedcCwkuznS1kSTvJXhzPoavcZDWNhNMshi-Ux0spSVRwU=RA%40mail.gmail.com/T/Mailing List, Patch, Third Party Advisory
https://security.netapp.com/advisory/ntap-20230803-0002/Third Party Advisory, VDB Entry
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2Release Notes, Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2b947f8769be8b8181dc795fd292d3e7120f5204Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/07/msg00030.htmlThird Party Advisory, VDB Entry
https://lore.kernel.org/all/20230327121700.52d881e0%40canb.auug.org.au/Mailing List, Third Party Advisory
https://lore.kernel.org/lkml/CAJedcCwkuznS1kSTvJXhzPoavcZDWNhNMshi-Ux0spSVRwU=RA%40mail.gmail.com/T/Mailing List, Patch, Third Party Advisory
https://security.netapp.com/advisory/ntap-20230803-0002/Third Party Advisory, VDB Entry

Timeline

Published: Jun 18, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-358297.0An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec CVE-2023-358309.8STW (aka Sensor-Technik Wiedemann) TCG-4 Connectivity Module DeploymentPackage_v3.03r0-Impala and DeploymentPackage_v3.04r2-Jellyfish and TC CVE-2023-358336.5An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP server configuration from LDAPS to LDAP, t CVE-2023-358359.8An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. The device provides a WiFi access point for initial configuration. The WiFi CVE-2023-358366.5An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. An attacker within RF range can obtain a cleartext copy of the network conf CVE-2023-358379.8An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. Authentication for web interface is completed via an unauthenticated WiFi A CVE-2023-358385.7The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses CVE-2023-358399.8A bypass in the component sofa-hessian of Solon before v2.3.3 allows attackers to execute arbitrary code via providing crafted payload.CVE-2023-35843.1Mattermost fails to properly check the authorization of POST /api/v4/teams when passing a team override scheme ID in the request, allowing a CVE-2023-358406.5_joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector.CVE-2023-358417.8Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modificati CVE-2023-358437.5NocoDB through 0.106.0 (or 0.109.1) has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on