The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code. For physically proximate attackers with local access, this "could be exploited in a real world scenario." This is related to brcmf_cfg80211_escan_timeout_worker in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c.
References
Configurations
History
27 Jun 2024, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
25 Jun 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
25 Mar 2024, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
14 Nov 2023, 16:00
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-416 | |
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
| First Time |
Linux
Linux linux Kernel |
|
| References | (MISC) https://bugzilla.suse.com/show_bug.cgi?id=1216702 - Issue Tracking, Third Party Advisory | |
| References | (MISC) https://marc.info/?l=linux-kernel&m=169907678011243&w=2 - Mailing List, Patch | |
| References | () https://lore.kernel.org/all/20231104054709.716585-1-zyytlz.wz%40163.com/ - Mailing List, Patch |
07 Nov 2023, 04:22
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
04 Nov 2023, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
03 Nov 2023, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-11-03 21:15
Updated : 2024-06-27 13:15
NVD link : CVE-2023-47233
Mitre link : CVE-2023-47233
CVE.ORG link : CVE-2023-47233
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-416
Use After Free