7.8
High
CVE-2023-1829 A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve…
Description
A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root. We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/ .
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Kernel 6.3 | earliest → < 6.3.0 | 6.3.0 |
| Linux Kernel 6.2 | 6.2.0 → < 6.2.5 | 6.2.5 |
| Linux Kernel 5.16 | 5.16.0 → < 6.1.18 | 6.1.18 |
| Linux Kernel 5.11 | 5.11.0 → < 5.15.100 | 5.15.100 |
| Linux Kernel 5.5 | 5.5.0 → < 5.10.173 | 5.10.173 |
| Linux Kernel 4.20 | 4.20.0 → < 5.4.235 | 5.4.235 |
| Linux Kernel 4.15 | 4.15.0 → < 4.19.276 | 4.19.276 |
| Linux Kernel 3.8 | 3.8.0 → < 4.14.308 | 4.14.308 |
References
- git.kernel.org git.kernel.org
- kernel.dance kernel.dance
- lists.debian.org lists.debian.org
- lists.debian.org lists.debian.org
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of Linux Kernel
The 43 CVEs of Linux Kernel →
CVE-2024-24864
A race condition was found in the Linux kernel's media/dvb-core in dvbdmx_write() function
5.3
Medium
CVE-2024-24857
A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function
4.6
Medium
CVE-2024-24858
A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function
4.6
Medium
CVE-2024-24859
A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function
4.6
Medium