CVE-2023-4134

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel. This issue occurs in the device cleanup routine due to a possible rearming of the watchdog_timer from the workqueue. This could allow a local user to crash the system, causing a denial of service.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Nov 14, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-413435.4Rogic No-Code Database Builder's file uploading function has insufficient filtering for special characters. A remote attacker with regular uCVE-2023-413447.5NCSIST ManageEngine Mobile Device Manager(MDM) APP's special function has a path traversal vulnerability. An unauthenticated remote attackerCVE-2023-413458.8ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-generateCVE-2023-413468.8ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh CVE-2023-413478.8ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its check token moCVE-2023-413488.8ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its code-authenticCVE-2023-413498.8ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN function. An authenticCVE-2023-41356.5A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided byCVE-2023-413509.8Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient measures to prevent multiple failed authentication attempts. An unauthenCVE-2023-413519.8Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of authentication bypass, which allows an unauthenticated remote attacker to bypass the CVE-2023-413527.2Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient filtering for user input. A remote attacker with administrator privilegeCVE-2023-413538.8Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of weak password requirements. A remote attacker with regular user privilege can easily
CVE-2023-4134: Medium severity, CVSS 5.5 | Vulnix