Medium
5.5
Kernel: smsusb: use-after-free caused by do_submit_urb()
CVE-2023-4132
First seen on SecPulse
Summary
A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs during device initialization when the siano device is plugged in. This flaw allows a local user to crash the system, causing a denial of service condition.
Fix status by distribution
Records published by each distribution for this CVE. Fixed versions differ by release; check each link.
- Debian DEBIAN-CVE-2023-4132 linux Fix available
- Ubuntu UBUNTU-CVE-2023-4132 linux-xilinx-zynqmp, linux-starfive-6.2, linux-riscv-5.15 +53 more Fix available
References
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory bugzilla.redhat.com
- web access.redhat.com
- web access.redhat.com
- web lists.debian.org
- web security.netapp.com
- web debian.org
- web debian.org