CVE-2022-23467

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the `razer_attr_read_dpi_stages`, potentially bypassing KASLR. To exploit this vulnerability an attacker would need to access to a users keyboard or mouse or would need to convince a user to use a modified device. The issue has been patched in v3.5.1. Users are advised to upgrade and should be reminded not to plug in unknown USB devices.

• CWE-125

• https://github.com/openrazer/openrazer/commit/33aa7f07d54ae066f201c6d298cb4a2181cb90e6Patch, Third Party Advisory
• https://github.com/openrazer/openrazer/security/advisories/GHSA-39hg-jvc9-fg7hPatch, Third Party Advisory
• https://github.com/openrazer/openrazer/commit/33aa7f07d54ae066f201c6d298cb4a2181cb90e6Patch, Third Party Advisory
• https://github.com/openrazer/openrazer/security/advisories/GHSA-39hg-jvc9-fg7hPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2025/04/msg00032.html

Published

Dec 5, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23461Jodit Editor is a WYSIWYG editor written in pure TypeScript …6.1
• CVE-2022-23462IOWOW is a C utility library and persistent key/value storag…7.5
• CVE-2022-23463Nepxion Discovery is a solution for Spring Cloud. Discover i…9.8
• CVE-2022-23464Nepxion Discovery is a solution for Spring Cloud. Discovery …7.5
• CVE-2022-23465SwiftTerm is a Xterm/VT100 Terminal emulator. Prior to commi…7.8
• CVE-2022-23466teler is an real-time intrusion detection and threat alert d…5.4
• CVE-2022-23468xrdp is an open source project which provides a graphical lo…9.8
• CVE-2022-23469Traefik is an open source HTTP reverse proxy and load balanc…6.5
• CVE-2022-2347There exists an unchecked length field in UBoot. The U-Boot …7.1
• CVE-2022-23470Galaxy is an open-source platform for data analysis. An arbi…7.5
• CVE-2022-23471containerd is an open source container runtime. A bug was fo…6.5
• CVE-2022-23472Passeo is an open source python password generator. Versions…7.5