PT-2023-4878

🗓️ 29 Jul 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 7 Views

Use-after-free in Linux kernel net/sched cls_fw enables local privilege escalation; upgrade past the specified commit.

Reporter	Title	Published	Views	Family All 18039
BDU FSTEC	The vulnerability of the recovery_request_write() function in the drivers/md/raid10.c module of the Linux operating system’s multi-device driver (RAID and LVM kernel), which allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.	4 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the vkms_init() function in the drivers/gpu/drm/vkms/vkms_drv.c file of the Direct Rendering Infrastructure (DRI) driver module in the Linux operating system allows a malicious actor to cause a service failure.	4 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the do_floppy_init() function in the drivers/block/floppy.c module of the Linux kernel’s block devices driver allows a attacker to cause a service failure.	4 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the function ice_xsk_pool_setup() in the driver drivers/net/ethernet/intel/ice/ice_xsk.c of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	6 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `pn532_uart_remove()` function in the `drivers/nfc/pn533/uart.c` file of the Linux NFC kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	6 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the csdlockdebug() function in the kernel/smp.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	10 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the functions hisi_acc_vfiopci_open_device() and hisi_acc_vfiopci_close_device() in the drivers/vfio/pci/hisilicon/hisi_acc_vfiopci.c driver for VFIO device controllers in the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.	10 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `security_read_state_kernel()` function in the `security/selinux/ss/services.c` module of the Linux kernel’s security subsystem allows a attacker to trigger a service failure.	16 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the functions aq_nic_service_timer_cb() and aq_nic_get_stats() in the driver drivers/net/ethernet/aquantia/atlantic/aq_nic.c of the Ethernet network adapter driver for the aQuantia Atlantic chipset in the Linux operating system, which allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information.	16 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the __kernfs_remove() function in the fs/kernfs/dir.c file of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	16 Mar 202600:00	–	bdu_fstec

Source	Link
bdu	www.bdu.fstec.ru/vul/2023-03642
access	www.access.redhat.com/security/cve/CVE-2023-53132
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2023-1023SE17
lkml	www.lkml.org/lkml/2023/2/20/128
seclists	www.seclists.org/oss-sec/2023/q4/14
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
access	www.access.redhat.com/security/cve/CVE-2023-53026
github	www.github.com/syedhafiz1234/nftables-oob-read-write-exploit-CVE-2023-35001-
access	www.access.redhat.com/security/cve/CVE-2022-49855
cve	www.cve.omp.ru/bb25402

26 Sep 2025 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 3.17.8 - 10

CVSS 24.6

EPSS0.71737

SSVC