CVE-2023-1855: Debian Linux

Medium severity, CVSS 6.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). This flaw could allow a local attacker to crash the system due to a race problem. This vulnerability could even lead to a kernel information leak problem.

Affected products

• Debian Debian Linux: version 10.0 only
• Linux Linux Kernel: before 6.3 (fixed in 6.3); from 4.9, before 4.14.311 (fixed in 4.14.311); from 4.15, before 4.19.279 (fixed in 4.19.279); from 4.20, before 5.4.238 (fixed in 5.4.238); from 5.5, before 5.10.176 (fixed in 5.10.176); from 5.11, before 5.15.104 (fixed in 5.15.104); …

Published 2023-04-05. Last modified 2026-06-17.