A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). This flaw could allow a local attacker to crash the system due to a race problem. This vulnerability could even lead to a kernel information leak problem.
References
| Link | Resource |
|---|---|
| https://github.com/torvalds/linux/commit/cb090e64cf25602b9adaf32d5dfc9c8bec493cd1 | Patch |
| https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html | Mailing List Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html | Mailing List Third Party Advisory |
| https://lore.kernel.org/all/20230318122758.2140868-1-linux%40roeck-us.net/ |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
02 Aug 2023, 17:12
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:* |
|
| References | (MLIST) https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html - Mailing List, Third Party Advisory | |
| References | (MLIST) https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html - Mailing List, Third Party Advisory | |
| References | (MISC) https://github.com/torvalds/linux/commit/cb090e64cf25602b9adaf32d5dfc9c8bec493cd1 - Patch |
23 Jul 2023, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
03 May 2023, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
03 May 2023, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-05 20:15
Updated : 2024-02-04 23:37
NVD link : CVE-2023-1855
Mitre link : CVE-2023-1855
CVE.ORG link : CVE-2023-1855
JSON object : View
Products Affected
debian
- debian_linux
linux
- linux_kernel
CWE
CWE-416
Use After Free