QwikSec

Security Database

CVE

CWE

Training

CVE-2023-1855

Published: Apr 5, 2023

Modified: Feb 12, 2025

PUBLISHED

Description

A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). This flaw could allow a local attacker to crash the system due to a race problem. This vulnerability could even lead to a kernel information leak problem.

Vendor	Product	Versions
n/a	Kernel	affected `Linux kernel prior to Kernel 6.3 RC3`

Weaknesses (CWE)

References

https://lore.kernel.org/all/20230318122758.2140868-1-linux%40roeck-us.net/

[debian-lts-announce] 20230502 [SECURITY] [DLA 3404-1] linux-5.10 security update

mailing-list

[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update

mailing-list

https://github.com/torvalds/linux/commit/cb090e64cf25602b9adaf32d5dfc9c8bec493cd1

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.