A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). This flaw could allow a local attacker to crash the system due to a race problem. This vulnerability could even lead to a kernel information leak problem.
References
| Link | Resource |
|---|---|
| https://github.com/torvalds/linux/commit/cb090e64cf25602b9adaf32d5dfc9c8bec493cd1 | Patch |
| https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html | Mailing List Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html | Mailing List Third Party Advisory |
| https://lore.kernel.org/all/20230318122758.2140868-1-linux%40roeck-us.net/ |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
07 Nov 2023, 04:05
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
02 Aug 2023, 17:12
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MLIST) https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html - Mailing List, Third Party Advisory | |
| References | (MISC) https://github.com/torvalds/linux/commit/cb090e64cf25602b9adaf32d5dfc9c8bec493cd1 - Patch | |
| References | (MLIST) https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html - Mailing List, Third Party Advisory | |
| CPE | cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
|
| First Time |
Debian
Debian debian Linux |
23 Jul 2023, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2023-04-05 20:15
Updated : 2024-02-28 20:13
NVD link : CVE-2023-1855
Mitre link : CVE-2023-1855
CVE.ORG link : CVE-2023-1855
JSON object : View
Products Affected
linux
- linux_kernel
debian
- debian_linux
CWE
CWE-416
Use After Free