CVE-2023-47233EPSS p22.9%

CVE-2023-47233CVE-2023-47233

linux / linux_kernel

Description

The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code. For physically proximate attackers with local access, this "could be exploited in a real world scenario." This is related to brcmf_cfg80211_escan_timeout_worker in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c.

Scoring

CVSS 4.3 ()
VectorCVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS0.32% probability of exploitation · percentile 22.9% · 2026-10-17T12:00:28Z
Last modified2026-10-15
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.