SECUFOCUSNOW
Home›CVE index›CVE-2023-1829
Review reviewHigh

CVE-2023-1829

Linux Linux Kernel, linux kernel

A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root. We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/ .

CVSS
7.8
EPSS
1.04%
60.5% percentile
CISA KEV
Not listed
Published
2023.04.12
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability1.04%
Technical severityCVSS 7.8

Vulnerability overview

A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root. We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/ .

Affected product and versions

Product
Linux Linux Kernel, linux kernel
Affected versions
>= 3.8.0 < 4.14.308, >= 4.15.0 < 4.19.276, >= 4.20.0 < 5.4.235, >= 5.5.0 < 5.10.173, >= 5.11.0 < 5.15.100, >= 5.16.0 < 6.1.18, >= 6.2.0 < 6.2.5, < 4.14.308, >= 4.15 < 4.19.276, >= 4.20 < 5.4.235, >= 5.5 < 5.10.173, >= 5.11 < 5.15.100, >= 5.16 < 6.1.18, >= 6.2 < 6.2.5
Fixed versions
4.14.308, 4.19.276, 5.4.235, 5.10.173, 5.15.100, 6.1.18, 6.2.5

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux Kernel, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416