PT-2023-4320 · Linux+9 · Linux Kernel+9

Mauro Matteo Cascella · Published 2023-04-15 · Updated 2026-05-26 · CVE-2023-4133

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free vulnerability was found in the cxgb4 driver. The bug occurs when the cxgb4 device is detaching due to a possible rearming of the flower stats timer from the work queue. This flaw allows a local user to crash the system, causing a denial of service condition. The vulnerability is related to the cxgb4 cleanup tc flower() function in the cxgb4 tc flower.c module, which is associated with the reuse of previously freed memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2024:2394

ALSA-2024:2950

ALSA-2024:3138

ALT-PU-2023-6854

ALT-PU-2024-14046

ALT-PU-2024-6818

AZL-27853

BDU:2023-04655

CESA-2024_2950

CESA-2024_3138

CVE-2023-4133

ECHO-0FFE-F8BC-4B42

INFSA-2024_2394

INFSA-2024_2950

INFSA-2024_3138

OESA-2023-1511

OESA-2023-1512

OESA-2023-1513

OPENSUSE-SU-2023_3392-1

OPENSUSE-SU-2023_3599-1

OPENSUSE-SU-2023_3599-2

OPENSUSE-SU-2023_3600-1

OPENSUSE-SU-2023_3600-2

OPENSUSE-SU-2023_3656-1

OPENSUSE-SU-2023_3682-1

OPENSUSE-SU-2023_3683-1

OPENSUSE-SU-2023_3683-2

OPENSUSE-SU-2023_3684-1

OPENSUSE-SU-2023_3704-1

OPENSUSE-SU-2023_3704-2

OPENSUSE-SU-2023_3964-1

OPENSUSE-SU-2023_3969-1

OPENSUSE-SU-2023_3971-1

OPENSUSE-SU-2023_3988-1

RHSA-2024:2394

RHSA-2024:2950

RHSA-2024:3138

RHSA-2024_2394

RHSA-2024_2950

RHSA-2024_3138

RLSA-2024:2950

RLSA-2024:3138

SUSE-SU-2023:3390-1

SUSE-SU-2023:3392-1

SUSE-SU-2023:3599-1

SUSE-SU-2023:3599-2

SUSE-SU-2023:3600-1

SUSE-SU-2023:3600-2

SUSE-SU-2023:3601-1

SUSE-SU-2023:3656-1

SUSE-SU-2023:3681-1

SUSE-SU-2023:3682-1

SUSE-SU-2023:3684-1

SUSE-SU-2023:3705-1

SUSE-SU-2023:3785-1

SUSE-SU-2023:3964-1

SUSE-SU-2023:3969-1

SUSE-SU-2023:3971-1

SUSE-SU-2023:3988-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

References · 497

• https://osv.dev/vulnerability/OESA-2023-1513 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2024-0905SE18MD · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3656-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:2950 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3705-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-3772 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:3599-2 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-4133 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-4133 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3988-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:2394 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4147 · Security Note
• https://linux.oracle.com/errata/ELSA-2024-3138.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3390-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:3138 · Vendor Advisory