CVE-2023-33288
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
An issue was discovered in the Linux kernel before version 6.2.9 related to a use-after-free in the bq24190_remove function in bq24190_charger.c. This could allow a local attacker to crash the system due to a race condition.
Risk Assessment
This vulnerability poses a risk of system crashes, potentially leading to downtime and data loss. A local attacker could exploit this flaw to destabilize the system.
Recommendation
It is recommended to update the Linux kernel to version 6.2.9 or later to mitigate this vulnerability. Additionally, systems should be monitored for unauthorized access.
Original NVD description (English source)
An issue was discovered in the Linux kernel before 6.2.9. A use-after-free was found in bq24190_remove in drivers/power/supply/bq24190_charger.c. It could allow a local attacker to crash the system due to a race condition.