What’s Vulnerable › Vulnerabilities

CVE-2023-4132: Kernel: smsusb: use-after-free caused by do_submit_urb()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-08-03 · updated 2026-06-17
• Weakness: CWE-416

Description

A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs during device initialization when the siano device is plugged in. This flaw allows a local user to crash the system, causing a denial of service condition.

Affected products

• Debian Linux: 10.0, 11.0, 12.0
• Fedoraproject Fedora: all versions
• Linux kernel: through 6.2.16
• Red Hat Enterprise Linux: 8.0
• RedHat Enterprise Linux For Real Time: 8.0
• RedHat Enterprise Linux For Real Time For Nfv: 8.0

References

• https://access.redhat.com/errata/RHSA-2023:6901
• https://access.redhat.com/errata/RHSA-2023:7077
• https://access.redhat.com/errata/RHSA-2024:0575
• https://access.redhat.com/errata/RHSA-2024:0724
• https://access.redhat.com/security/cve/CVE-2023-4132
• https://bugzilla.redhat.com/show_bug.cgi?id=2221707
• https://access.redhat.com/errata/RHSA-2023:6901
• https://access.redhat.com/errata/RHSA-2023:7077
• https://access.redhat.com/errata/RHSA-2024:0575
• https://access.redhat.com/errata/RHSA-2024:0724
• https://access.redhat.com/security/cve/CVE-2023-4132
• https://bugzilla.redhat.com/show_bug.cgi?id=2221707

Get alerted when CVE-2023-4132 or the next vulnerability affects your stack