CVE-2023-4623

A use-after-free vulnerability in the Linux kernel's net/sched: schhfsc HFSC qdisc traffic control component can be exploited to achieve local privilege escalation. If a class with a link-sharing curve i.e. with the HFSCFSC flag set has a parent without a link-sharing curve, then initvf will call...

CVE-2023-4623

CVE-2023-4623 describes a use-after-free in the Linux kernel’s net/sched sch_hfsc subsystem that can enable local privilege escalation. The issue occurs when a class uses a link-sharing curve (HFSC_FSC) and has a parent without one; init_vf() may call vttree_insert() on the parent, but update_vf(...

CVE-2023-4623: Use After Free

A use-after-free vulnerability in the Linux kernel's net/sched: schhfsc HFSC qdisc traffic control component can be exploited to achieve local privilege escalation. If a class with a link-sharing curve i.e. with the HFSCFSC flag set has a parent without a link-sharing curve, then initvf will call...