CVE-2023-1073

Updated: 2026-03-05 01:35:18.670309

Description:

A memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem in how a user inserts a malicious USB device. This flaw allows a local user to crash or potentially escalate their privileges on the system.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x MEDIUM 6.6

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 6.6 MEDIUM Released CLSA-2025:1743193221 2024-06-24 11:28:31
CentOS 6 ELS kernel 2.6.32 6.6 MEDIUM Ignored 2023-10-27 11:06:50 Ignored due to low severity
CentOS 7 ELS kernel 3.10.0 6.6 MEDIUM Ignored 2023-09-19 05:07:25 Ignored due to low severity
CentOS 8.4 ELS kernel 4.18.0 6.6 MEDIUM Released CLSA-2024:1719932549 2024-07-02 11:29:44
CentOS 8.5 ELS kernel 4.18.0 6.6 MEDIUM Released CLSA-2024:1719933179 2024-07-02 11:29:45
CentOS Stream 8 ELS kernel 4.18.0 6.6 MEDIUM Ignored 2024-06-24 11:20:05 Ignored due to low severity
CloudLinux 6 ELS kernel 2.6.32 6.6 MEDIUM Ignored 2023-10-27 11:06:50 Ignored due to low severity
CloudLinux 7 ELS kernel 3.10.0 6.6 MEDIUM Ignored 2024-10-03 10:52:01 Ignored due to low severity
Oracle Linux 6 ELS kernel 2.6.32 6.6 MEDIUM Ignored 2023-10-27 11:06:50 Ignored due to low severity
Ubuntu 16.04 ELS linux-hwe 4.15.0 6.6 MEDIUM Released 2023-04-25 08:49:12
Total: 12