CVE-2023-4132
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
A use-after-free vulnerability was found in the smsusb module in the Linux kernel. The bug occurs during device initialization when the siano device is plugged in, allowing a local user to crash the system, causing a denial of service condition.
Risk Assessment
This vulnerability can lead to system crashes, resulting in service unavailability for users. It may impact the stability and security of the entire IT infrastructure.
Recommendation
It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability. Additionally, monitor systems for unauthorized access.
Original NVD description (English source)
A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs during device initialization when the siano device is plugged in. This flaw allows a local user to crash the system, causing a denial of service condition.