Lucene search

K
cvelistGoogleCVELIST:CVE-2023-6932
HistoryDec 19, 2023 - 2:09 p.m.

CVE-2023-6932 Use-after-free in Linux kernel's ipv4: igmp component

2023-12-1914:09:15
CWE-416
Google
raw.githubusercontent.com
1
linux kernel
ipv4
igmp
use-after-free
vulnerability
local privilege escalation
race condition
timer
rcu
upgrade
commit

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.2%

A use-after-free vulnerability in the Linux kernel’s ipv4: igmp component can be exploited to achieve local privilege escalation.

A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread.

We recommend upgrading past commit e2b706c691905fe78468c361aaabc719d0a496f1.