CVE-2023-1829

Summary

A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root.

We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/ .

Affected Software

VendorProductVersion RangeStatus
LinuxLinux Kernel3.8.0 < 4.14.308affected
LinuxLinux Kernel4.15.0 < 4.19.276affected
LinuxLinux Kernel4.20.0 < 5.4.235affected
LinuxLinux Kernel5.5.0 < 5.10.173affected
LinuxLinux Kernel5.11.0 < 5.15.100affected
LinuxLinux Kernel5.16.0 < 6.1.18affected
LinuxLinux Kernel6.2.0 < 6.2.5affected
LinuxLinux Kernel6.3.0unaffected
LinuxLinux Kernel8c710f75256bb3cf05ac7b1672c82b92c43f3d28unaffected

Weaknesses

  • CWE-416: CWE-416 Use After Free

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References