CVE Catalog
CVE-2023-33203
MediumCVSS 6.4Exploitation Probability (EPSS)
Low risk0.36%
27th percentile - higher than 27% of all known CVEs
Summary
The Linux kernel before version 6.2.9 has a race condition and resultant use-after-free in emac.c if a physically proximate attacker unplugs an emac based device.
Risk Assessment
An attacker nearby could exploit this vulnerability to destabilize the system or gain access to memory, potentially leading to unauthorized access or system failure.
Recommendation
It is recommended to update the Linux kernel to version 6.2.9 or later to mitigate this vulnerability.
Original NVD description (English source)
The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/net/ethernet/qualcomm/emac/emac.c if a physically proximate attacker unplugs an emac based device.