← CVE Intelligence

CVE-2023-4132

Kernel: smsusb: use-after-free caused by do_submit_urb() PUBLISHED

Description (CNA)

A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs during device initialization when the siano device is plugged in. This flaw allows a local user to crash the system, causing a denial of service condition.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 8unaffected 0:4.18.0-513.5.1.rt7.307.el8_9 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:4.18.0-513.5.1.el8_9 before *
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Supportunaffected 0:4.18.0-372.91.1.el8_6 before *
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 0:4.18.0-477.43.1.el8_8 before *
Red Hat / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8unaffected 0:4.18.0-372.91.1.el8_6 before *
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 7unknown
Red Hat / Red Hat Enterprise Linux 7unknown
Red Hat / Red Hat Enterprise Linux 9unaffected
Red Hat / Red Hat Enterprise Linux 9unaffected

CWE

CWE-416

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.