CVE-2023-47233

CVE	CVE-2023-47233
State	PUBLISHED
Assigner	mitre
Source Priority	CVE Program / NVD first with legacy fallback
Published	2023-11-03 21:15:17 UTC
Updated	2026-05-12 11:16:14 UTC
Description	The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code. For physically proximate attackers with local access, this "could be exploited in a real world scenario." This is related to brcmf_cfg80211_escan_timeout_worker in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c.

Primary CVSS: v3.1 4.3 MEDIUM from [email protected]

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.000200000 probability, percentile 0.057510000 (date 2026-05-12)

Problem Types: CWE-416 | n/a | CWE-416 CWE-416 Use After Free

Version	Source	Type	Score	Severity	Vector
3.1	[email protected]	Primary	4.3	MEDIUM	`CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`
3.1	ADP	DECLARED	4.3	MEDIUM	`CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`
3.1	134c704f-9b21-4f2e-91b3-4a467353bcc0	Secondary	4.3	MEDIUM	`CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`

Attack Vector

Physical

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Linux	Linux Kernel	All	All	All	All

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified
ADP	Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux Subsystem	affected * custom	Not specified

Reference	Source	Link	Tags
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit	af854a3a-2127-422b-91ae-364da2661108	git.kernel.org
lists.debian.org/debian-lts-announce/2024/06/msg00017.html	af854a3a-2127-422b-91ae-364da2661108	lists.debian.org
cert-portal.siemens.com/productcert/html/ssa-265688.html	0b142b55-0307-4c5a-b3c9-f314f3fb7c5e	cert-portal.siemens.com
1216702 – VUL-0: kernel: Use after Free bug in brcmf_cfg80211_detach	af854a3a-2127-422b-91ae-364da2661108	bugzilla.suse.com	Issue Tracking, Third Party Advisory
'[PATCH] wifi: cfg80211: Fix use-after-free bug in brcmf_cfg80211_detach' - MARC	af854a3a-2127-422b-91ae-364da2661108	marc.info	Mailing List, Patch
[PATCH] wifi: cfg80211: Fix use-after-free bug in brcmf_cfg80211_detach - Zheng Wang	af854a3a-2127-422b-91ae-364da2661108	lore.kernel.org	Mailing List, Patch
lists.debian.org/debian-lts-announce/2024/06/msg00020.html	af854a3a-2127-422b-91ae-364da2661108	lists.debian.org
[PATCH] wifi: cfg80211: Fix use-after-free bug in brcmf_cfg80211_detach - Zheng Wang	MITRE	lore.kernel.org
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

6000567 Debian Security Update for linux (DSA 5658-1)
755747 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2024:0469-1)
755750 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2024:0476-1)
755751 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2024:0474-1)
755752 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2024:0478-1)
755753 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2024:0484-1)
755754 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2024:0516-1)
755755 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2024:0515-1)
755756 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2024:0514-1)
755765 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2024:0483-1)