CVE-2023-4133: Kernel: cxgb4: use-after-free in ch_flower_stats_cb()
A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device is detaching due to a possible rearming of the flowerstatstimer from the work queue. This flaw allows a local user to crash the system, causing a denial of service condition.
Other sources
From the upstream fix below: The flowerstatstimer can schedule flowerstatswork and flowerstatswork can also arm the flowerstatstimer [..] When the cxgb4 device is detaching, the timer and workqueue could still be rearmed. As a result, a possible use-after-free bug could happen.
Upstream commit: https://github.com/torvalds/linux/commit/e50b9b9e8610d47b7c22529443e45a16b1ea3a15
— Red Hat
Linux Kernel is vulnerable to a denial of service, caused by a use-after-free flaw in the cxgb4 driver. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause the system to crash.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-4133?
CVE-2023-4133 is a use-after-free vulnerability in the cxgb4 driver in the Linux kernel, which can cause a denial of service condition.
How severe is CVE-2023-4133?
CVE-2023-4133 has a severity rating of medium (5.5).
What software is affected by CVE-2023-4133?
The affected software includes Red Hat Kernel 6.3, Linux Kernel up to version 6.3, Red Hat Enterprise Linux 8.0, Red Hat Enterprise Linux 9.0, and Fedora.
How can CVE-2023-4133 be exploited?
CVE-2023-4133 can be exploited by a local user to crash the system, leading to a denial of service.
Are there any remedies available for CVE-2023-4133?
Yes, Red Hat provides a fix for CVE-2023-4133 in their kernel version 6.3 and above.