CVE-2023-52478: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-52478 affects the Linux kernel's Logitech HID++ driver, specifically related to a kernel crash condition that occurs during USB receiver disconnection. The vulnerability was discovered in 2023 and affects multiple versions of the Linux kernel up to versions 4.14.328, 4.19.297, 5.4.259, 5.10.199, 5.15.136, 6.1.59, and 6.5.8 (NVD).

The vulnerability stems from four time-of-check vs time-of-use (TOCTOU) races in the hidpp_connect_event() function. The function can run simultaneously from both a workqueue and probe(), leading to race conditions. The most critical issue occurs during power supply initialization, where two power supplies can be registered for the same battery, causing a use-after-free scenario during USB disconnect. This happens because the hidpp->battery.desc struct is shared between two power supplies, and hidpp->battery.desc.properties points to the second devm_kmemdup() result (Kernel Patch).

When exploited, this vulnerability causes a kernel crash during USB receiver disconnection. The crash occurs due to a use-after-free condition where the power_supply_uevent() function attempts to access freed memory, resulting in a page fault. This can lead to system instability and potential denial of service (Kernel Patch).

The vulnerability is triggered during normal device operation when disconnecting a Logitech USB receiver. It requires local access to the system and physical access to the USB device. The CVSS v3.1 score is AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H, indicating local access required with high complexity (NVD).

The issue has been fixed by modifying the probe() function to use the workqueue for running hidpp_connect_event(), ensuring it can never run more than once. The fix has been implemented in various kernel versions through patches. Users should update to the latest kernel version that includes the fix (Kernel Patch).