MEDIUM 6.3 Microsoft

CVE-2023-1855

A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). This flaw could allow a local attacker to crash the system due to a race problem. This vulnerability could even lead to a kernel information leak problem.

Microsoft Security Update 2023-Apr: A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). This flaw could allow a local attacker to crash the system due to a race problem. This vulnerability could even lead to a kernel information leak problem.

Affected Products

References

Published: 2023-04-11 · Source: Microsoft · Feed updated: 2026-10-29
This medium severity vulnerability with a CVSS score of 6.3 was published on 2023-04-11 via Microsoft. Affected: cm1 hyperv-daemons 5.10.177.1-1 on CBL Mariner 1.0, cm1 kernel 5.10.177.1-1 on CBL Mariner 1.0, cbl2 hyperv-daemons 5.15.107.1-1 on CBL Mariner 2.0 and 1 more.
vulnfeed aggregates 16756 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.