A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root.
We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/ .
{
"cna_assigner": "Google",
"cwe_ids": [
"CWE-416"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1829.json",
"unresolved_ranges": [
{
"extracted_events": [
{
"range": [
{
"introduced": "3.8.0"
},
{
"fixed": "4.14.308"
},
{
"introduced": "4.15.0"
},
{
"fixed": "4.19.276"
},
{
"introduced": "4.20.0"
},
{
"fixed": "5.4.235"
},
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.173"
},
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.100"
},
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.18"
},
{
"introduced": "6.2.0"
},
{
"fixed": "6.2.5"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
}
]
}
]
}{
"extracted_events": [
{
"range": [
{
"fixed": "8c710f75256bb3cf05ac7b1672c82b92c43f3d28"
}
],
"source": "REFERENCES_COMMIT"
}
]
}