NetSight
IP …
medium6.3

CVE-2023-1855

A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon).

Impact

A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). This flaw could allow a local attacker to crash the system due to a race problem. This vulnerability could even lead to a kernel information leak problem.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 6.3
from 4.9 before 4.14.311
from 4.15 before 4.19.279
from 4.20 before 5.4.238
from 5.5 before 5.10.176
from 5.11 before 5.15.104
DebianDebian Linux
Version 10.0

Weakness classification

CWE-416

References