Description
A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs during device initialization when the siano device is plugged in. This flaw allows a local user to crash the system, causing a denial of service condition.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Red Hat Red Hat Enterprise Linux 8
Default version status: affected
0:4.18.0-513.5.1.rt7.307.el8_9 to < *unaffected
Red Hat Red Hat Enterprise Linux 8
Default version status: affected
0:4.18.0-513.5.1.el8_9 to < *unaffected
Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support
Default version status: affected
0:4.18.0-372.91.1.el8_6 to < *unaffected
Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support
Default version status: affected
0:4.18.0-477.43.1.el8_8 to < *unaffected
Red Hat Red Hat Virtualization 4 for Red Hat Enterprise Linux 8
Default version status: affected
0:4.18.0-372.91.1.el8_6 to < *unaffected
Red Hat Red Hat Enterprise Linux 6
Default version status: unknown
Red Hat Red Hat Enterprise Linux 7
Default version status: unknown
Red Hat Red Hat Enterprise Linux 7
Default version status: unknown
Red Hat Red Hat Enterprise Linux 9
Default version status: unaffected
Red Hat Red Hat Enterprise Linux 9
Default version status: unaffected
References
- https://access.redhat.com/errata/RHSA-2023:6901 ↗
- https://access.redhat.com/errata/RHSA-2023:7077 ↗
- https://access.redhat.com/errata/RHSA-2024:0575 ↗
- https://access.redhat.com/errata/RHSA-2024:0724 ↗
- https://access.redhat.com/security/cve/CVE-2023-4132 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2221707 ↗
- https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html ↗
- https://security.netapp.com/advisory/ntap-20231020-0005/ ↗
- https://www.debian.org/security/2023/dsa-5480 ↗
- https://www.debian.org/security/2023/dsa-5492 ↗