OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the `razer_attr_read_dpi_stages`, potentially bypassing KASLR. To exploit this vulnerability an attacker would need to access to a users keyboard or mouse or would need to convince a user to use a modified device. The issue has been patched in v3.5.1. Users are advised to upgrade and should be reminded not to plug in unknown USB devices.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other
    features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the
    `razer_attr_read_dpi_stages`, potentially bypassing KASLR. To exploit this vulnerability an attacker would
    need to access to a users keyboard or mouse or would need to convince a user to use a modified device. The
    issue has been patched in v3.5.1. Users are advised to upgrade and should be reminded not to plug in
    unknown USB devices. (CVE-2022-23467)

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4136 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4136-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     April 24, 2025                                https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : openrazer     Version        : 2.9.0+dfsg-1+deb11u1     CVE ID         : CVE-2022-23467 CVE-2022-29021 CVE-2022-29022 CVE-2022-29023                      CVE-2025-32776

    Multiple vulnerabilities have been fixed in the OpenRazer drivers for     devices from Razer, a company selling hardware mainly targeted at gamers.

    CVE-2022-23467

        out-of-bounds read

    CVE-2022-29021

        buffer overflow in the razerkbd driver

    CVE-2022-29022

        buffer overflow in the razeraccessory driver

    CVE-2022-29023

        buffer overflow in the razermouse driver

    CVE-2025-32776

        out-of-bounds read

    For Debian 11 bullseye, these problems have been fixed in version     2.9.0+dfsg-1+deb11u1.

    We recommend that you upgrade your openrazer packages.

    For the detailed security status of openrazer please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/openrazer

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other     features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the     `razer_attr_read_dpi_stages`, potentially bypassing KASLR. To exploit this vulnerability an attacker would     need to access to a users keyboard or mouse or would need to convince a user to use a modified device. The     issue has been patched in v3.5.1. Users are advised to upgrade and should be reminded not to plug in     unknown USB devices. (CVE-2022-23467)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
426778	Alpine: multiple openrazer packages, multiple py3-openrazer packages: security update to 3.5.1-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
426778	Alpine: multiple openrazer packages, multiple py3-openrazer packages: security update to 3.5.1-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
234799	Debian dla-4136 : openrazer-daemon - security update	Nessus	Debian Local Security Checks	critical
229622	Linux Distros Unpatched Vulnerability : CVE-2022-23467	Nessus	Misc.	medium
406021	Alpine: multiple openrazer packages, multiple py3-openrazer packages: security update to 3.5.1-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
406021	Alpine: multiple openrazer packages, multiple py3-openrazer packages: security update to 3.5.1-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium

Detections

Analytics

CVE-2022-23467

medium

Tenable Plugins

medium

medium

critical

medium

medium

medium