PT-2023-2214 · Linux+8 · Linux Kernel+8

Zheng Wang · Published 2023-03-10 · Updated 2025-02-12 · CVE-2023-1855

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A use-after-free flaw was found in the xgene hwmon remove function in drivers/hwmon/xgene-hwmon.c of the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). This issue could allow a local attacker to crash the system due to a race problem, potentially leading to a kernel information leak problem.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2023:7077

ALT-PU-2023-1878

ALT-PU-2023-1881

ALT-PU-2023-4663

ALT-PU-2023-5060

ALT-PU-2024-14046

ALT-PU-2024-6818

AZL-26033

AZL-26142

BDU:2023-01962

CESA-2023_6901

CESA-2023_7077

CVE-2023-1855

DLA-3403-1

DLA-3404-1

MGASA-2023-0148

MGASA-2023-0149

OESA-2023-1215

OESA-2023-1229

OESA-2023-1265

OESA-2023-1268

OPENSUSE-SU-2023_2646-1

OPENSUSE-SU-2023_2871-1

RHSA-2023:6583

RHSA-2023:6901

RHSA-2023:7077

RHSA-2023_6583

RHSA-2023_6901

RHSA-2023_7077

RHSA-2024:0412

RHSA-2024:0575

SUSE-SU-2023:2140-1

SUSE-SU-2023:2141-1

SUSE-SU-2023:2146-1

SUSE-SU-2023:2147-1

SUSE-SU-2023:2148-1

SUSE-SU-2023:2151-1

SUSE-SU-2023:2156-1

SUSE-SU-2023:2162-1

SUSE-SU-2023:2163-1

SUSE-SU-2023:2231-1

SUSE-SU-2023:2232-1

SUSE-SU-2023:2646-1

SUSE-SU-2023:2809-1

SUSE-SU-2023:2871-1

USN-6033-1

USN-6175-1

USN-6186-1

USN-6284-1

USN-6300-1

USN-6301-1

USN-6311-1

USN-6312-1

USN-6314-1

USN-6331-1

USN-6332-1

USN-6337-1

USN-6347-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linux Kernel

Linuxmint

Red Hat

Suse

Ubuntu

References · 891

• https://github.com/torvalds/linux/commit/cb090e64cf25602b9adaf32d5dfc9c8bec493cd1 · Patch
• https://osv.dev/vulnerability/USN-6301-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-32248 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-20593 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:2163-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-2194 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-0416SE47 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6033-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1855 · Security Note
• https://osv.dev/vulnerability/USN-6312-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:2151-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2023-0149 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6337-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1998 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6311-1 · Vendor Advisory