2 matches found
CVE-2023-47233
CVE-2023-47233: Linux kernel brcm80211/brcmfmac use-after-free in brcmf_cfg80211_detach during USB hotplug unplug. Root cause: escan_timeout_worker accesses cfg after brcmf_cfg80211_detach frees it. Fix: cancel the escan timeout timer and cancel the worker in brcmf_cfg80211_detach before freeing ...
CVE-2023-5972
CVE-2023-5972 concerns a null pointer dereference in the netfilter nft_inner.c path of the Linux kernel. A local attacker could crash the system or escalate privileges via improper handling of nft_inner_num/nft_inner_expr_name attributes in inner tunnel netlink attributes, as described in the CVE...