CVE-2023-4133

MediumCVSS 5.5

Published: 03/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device is detaching, potentially leading to a system crash.

Risk Assessment

This vulnerability can be exploited by a local user to crash the system, resulting in a denial of service condition.

Recommendation

It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability.

Original NVD description (English source)

A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device is detaching due to a possible rearming of the flower_stats_timer from the work queue. This flaw allows a local user to crash the system, causing a denial of service condition.