PT-2023-4319 · Linux+9 · Linux Kernel+9

Mauro Matteo Cascella · Published 2023-02-08 · Updated 2026-02-03 · CVE-2023-4132

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs during device initialization when the siano device is plugged in. This flaw allows a local user to crash the system, causing a denial of service condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2023:7077

ALT-PU-2024-14046

ALT-PU-2024-6818

AZL-27852

BDU:2023-04654

CESA-2023_6901

CESA-2023_7077

CVE-2023-4132

DLA-3623-1

DSA-5480-1

DSA-5492-1

OESA-2023-1494

OESA-2023-1495

OESA-2023-1614

OESA-2023-1615

OESA-2023-1616

OPENSUSE-SU-2023_3680-1

OPENSUSE-SU-2023_3684-1

RHSA-2023:6901

RHSA-2023:7077

RHSA-2023_6901

RHSA-2023_7077

RHSA-2024:0575

RHSA-2024:0724

SUSE-SU-2023:3601-1

SUSE-SU-2023:3680-1

SUSE-SU-2023:3681-1

SUSE-SU-2023:3684-1

SUSE-SU-2023:3687-1

SUSE-SU-2023:3705-1

SUSE-SU-2023:3785-1

SUSE-SU-2026:0316-1

SUSE-SU-2026:0350-1

SUSE-SU-2026:0369-1

USN-6416-1

USN-6416-2

USN-6416-3

USN-6445-1

USN-6445-2

USN-6462-1

USN-6462-2

USN-6464-1

USN-6466-1

USN-6520-1

USN-6701-1

USN-6701-2

USN-6701-3

USN-6701-4

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Red Os

Suse

Ubuntu

References · 745

• https://ubuntu.com/security/CVE-2023-4273 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3785-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-45887 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4921 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6416-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6520-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6701-2 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:0724 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4155 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3006 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6416-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3338 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-42753 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6701-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-2156 · Vendor Advisory