CVE-2023-4133

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free vulnerability was found in the cxgb4 driver. The bug occurs when the cxgb4 device is detaching due to a possible rearming of the flower stats timer from the work queue. This flaw allows a local user to crash the system, causing a denial of service condition. The vulnerability is related to the cxgb4 cleanup tc flower() function in the cxgb4 tc flower.c module, which is associated with the reuse of previously freed memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.