cbcvebase.
CVE-2023-53253
published 2025-09-15

CVE-2023-53253: In the Linux kernel, the following vulnerability has been resolved: HID: nvidia-shield: Reference hid_device devm allocation of input_dev name Use hid_device…

PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.13%
3.3th percentile
In the Linux kernel, the following vulnerability has been resolved: HID: nvidia-shield: Reference hid_device devm allocation of input_dev name Use hid_device for devm allocation of the input_dev name to avoid a use-after-free. input_unregister_device would trigger devres cleanup of all resources associated with the input_dev, free-ing the name. The name would subsequently be used in a uevent fired at the end of unregistering the input_dev.

Affected

7 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.5.3-1 (forky)linux 6.5.3-1 (forky)
linuxlinux
linuxlinux>= 09308562d4afb1abc66366608fa1cb9de783272f < b85d3807e5ec368bfd5b20245347d7c1434aff76b85d3807e5ec368bfd5b20245347d7c1434aff76
linuxlinux>= 09308562d4afb1abc66366608fa1cb9de783272f < 197d3143520fec9fde89aebabc9f0d7464f08e50197d3143520fec9fde89aebabc9f0d7464f08e50
linuxlinux_kernel>= 0 < 6.5.3-16.5.3-1
linuxlinux_kernel>= 0 < 6.5.3-16.5.3-1
linuxlinux_kernel>= 6.5 < 6.5.36.5.3

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8LOW
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.