kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation

A use-after-free flaw was found in route4change in the net/sched/clsroute.c filter implementation in the Linux kernel. This flaw allows a local user to crash the system and possibly lead to a local privilege escalation problem...

PT-2023-3974 · Linux +10 · Linux Kernel +10

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free vulnerability in the Linux kernel's net/sched: cls fw component can be exploited to achieve local privilege escalation. If tcf change indev fails, fw set parms will...

The vulnerability of the fl_set_geneve_opt() function in the net/sched/cls_flower.c module, part of the network scheduling subsystem in the Linux operating system’s kernel, allows a malicious actor to cause service failures or increase their privileges.

The vulnerability of the flsetgeneveopt function in the net/sched/clsflower.c module, within the net/sched scheduling subsystem of the Linux operating system’s kernel, is related to incorrect calculations of buffer boundaries during writing operations. Exploiting this vulnerability may allow a...

SUSE SLES15: kernel-livepatch-5_3_18-150200_24_151-default / etc (SUSE-SU-2023:2709-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:2709-1 advisory. This update for the Linux Kernel 5.3.18-15020024151 fixes one issue. The following security issue was fixed: - CVE-2023-31436: Fixed an out-of-bounds...

SUSE SLES15 Security Update : kernel (Live Patch 30 for SLE 15 SP2) (SUSE-SU-2023:2695-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2695-1 advisory. This update for the Linux Kernel 5.3.18-15020024129 fixes several issues. The following security issues were fixed: - CVE-2022-4744: Fixed...

Linux kernel 缓冲区错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 6.3.7, which stems from a faulty flsetgeneveopt in net/sched/clsflower.c that allows out-of-bounds writing ...

CVE-2023-35788

An issue was discovered in flsetgeneveopt in net/sched/clsflower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCAFLOWERKEYENCOPTSGENEVE packets. This may result in denial of service or privilege escalation...

CVE-2023-35788: Out-of-bounds Write

An issue was discovered in flsetgeneveopt in net/sched/clsflower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCAFLOWERKEYENCOPTSGENEVE packets. This may result in denial of service or privilege escalation...

PT-2023-3675

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free vulnerability in the Linux kernel's net/sched: cls u32 component can be exploited to achieve local privilege escalation. If tcf change indev fails, u32 set parms will...

PT-2023-3342

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.7 Description The issue is related to the fl set geneve opt function in the net/sched/cls flower.c module of the Linux kernel's traffic control subsystem. It involves incorrect buffer boundary calculation...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2023-045)

The version of kernel installed on the remote host is prior to 5.4.242-155.348. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2023-045 advisory. 2023-09-14: CVE-2023-2163 was added to this advisory. bpf: incorrect verifier pruning due to missing...

kernel: use-after-free due to race condition in qdisc_graft()

A use-after-free flaw was found in qdiscgraft in net/sched/schapi.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. If patch ebda44da44f6 "net: sched: fix race condition in qdiscgraft" not applied yet, then kernel could be affected...

CVE-2023-31436

qfqchangeclass in net/sched/schqfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQMINLMAX...

CVE-2023-31436

qfqchangeclass in net/sched/schqfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQMINLMAX...

CVE-2023-31436: Out-of-bounds Write

qfqchangeclass in net/sched/schqfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQMINLMAX...

CVE-2023-31436

qfqchangeclass in net/sched/schqfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQMINLMAX...

PT-2023-36601

Уязвимость функции tcf block bind модуля net/sched/cls api.c подсистемы управления трафиком net/sched ядра операционной системы Linux связана с повторным использованием ранее освобожденной памяти. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность,...

PT-2023-36709

Уязвимость функции fq resize модуля net/sched/sch fq.c подсистемы управления трафиком net/sched ядра операционной системы Linux связана с целочисленным переполнением или циклическим сдвигом. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-41068

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow issue exists in the net/sched sch fq module when the "initial quantum" is configured with values greater than INT MAX. This overflow results in a negative value being...

Tenda AC10 缓冲区错误漏洞

Tenda AC10 is a wireless router from Tenda China. A security vulnerability exists in the Tenda AC10 USAC10V4.0siV16.03.10.13cn version, which stems from a stack overflow issue discovered via the setSchedWifi function. An attacker could exploit this vulnerability to cause a system denial of servic...