Aller au contenu
en Se connecter
7.8 Élevée

CVE-2023-1829 A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve…

Description

A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root. We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/ .

Produits et versions touchés

Produit Versions touchées Corrigé en
Linux Kernel 6.3 premières → < 6.3.0 6.3.0
Linux Kernel 6.2 6.2.0 → < 6.2.5 6.2.5
Linux Kernel 5.16 5.16.0 → < 6.1.18 6.1.18
Linux Kernel 5.11 5.11.0 → < 5.15.100 5.15.100
Linux Kernel 5.5 5.5.0 → < 5.10.173 5.10.173
Linux Kernel 4.20 4.20.0 → < 5.4.235 5.4.235
Linux Kernel 4.15 4.15.0 → < 4.19.276 4.19.276
Linux Kernel 3.8 3.8.0 → < 4.14.308 4.14.308

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Linux Kernel

Les 43 CVE de Linux Kernel →
CVE-2024-24864 A race condition was found in the Linux kernel's media/dvb-core in dvbdmx_write() function 5.3 Moyenne CVE-2024-24857 A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function 4.6 Moyenne CVE-2024-24858 A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function 4.6 Moyenne CVE-2024-24859 A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function 4.6 Moyenne
Suivre cette CVE