CVE-2023-33288

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.9

Description A use-after-free issue was found in the bq24190 remove() function in the drivers/power/supply/bq24190 charger.c module of the Linux kernel. This issue could allow a local attacker to crash the system due to a race condition. The exploitation of this issue may result in a denial of service.

Recommendations For Linux kernel versions prior to 6.2.9, update to version 6.2.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the bq24190 remove() function in the drivers/power/supply/bq24190 charger.c module to minimize the risk of exploitation.