CVE-2023-1855

A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). This flaw could allow a local attacker to crash the system due to a race problem. This vulnerability could even lead to a kernel information leak problem.

Score

CVSS 3.1 6.3 Medium

Status

Modified - secalert@redhat.com

Published

2023-04-05

Last modified

2025-02-12

Weaknesses

CWE-416

Affected products

• Debian Linux (Debian)
• Linux Kernel (Linux)

References

• https://github.com/torvalds/linux/commit/cb090e64cf25602b9adaf32d5dfc9c8bec493cd1
• https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html
• https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
• https://lore.kernel.org/all/20230318122758.2140868-1-linux%40roeck-us.net/