CVE-2023-1855

2023-04-0500:00:00

CWE-416

redhat

www.cve.org

use-after-free

xgene-hwmon

crash

kernel information leak

AI Score

6.6

Confidence

High

EPSS

Percentile

5.1%

JSON

A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). This flaw could allow a local attacker to crash the system due to a race problem. This vulnerability could even lead to a kernel information leak problem.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Kernel",
    "versions": [
      {
        "version": "Linux kernel prior to Kernel 6.3 RC3",
        "status": "affected"
      }
    ]
  }
]