CVE-2023-1829

2023-04-1200:00:00

ubuntu.com

use-after-free

linux kernel

traffic control

privilege escalation

vulnerability

local attacker

double freeing

filters

perfect hashes

root privileges

bugzilla suse.

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

17.1%

JSON

A use-after-free vulnerability in the Linux Kernel traffic control index
filter (tcindex) can be exploited to achieve local privilege escalation.
The tcindex_delete function which does not properly deactivate filters in
case of a perfect hashes while deleting the underlying structure which can
later lead to double freeing the structure. A local attacker user can use
this vulnerability to elevate its privileges to root. We recommend
upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28.

Bugs

<https://bugzilla.suse.com/show_bug.cgi?id=1210335>

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-210.221UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-148.165UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-71.78UNKNOWN
ubuntu22.10noarchlinux< 5.19.0-41.42UNKNOWN
ubuntu14.04noarchlinux< anyUNKNOWN
ubuntu16.04noarchlinux< 4.4.0-240.274UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1155.168UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1101.109UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1035.39UNKNOWN
ubuntu22.10noarchlinux-aws< 5.19.0-1024.25UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux	< 4.15.0-210.221	UNKNOWN
ubuntu	20.04	noarch	linux	< 5.4.0-148.165	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-71.78	UNKNOWN
ubuntu	22.10	noarch	linux	< 5.19.0-41.42	UNKNOWN
ubuntu	14.04	noarch	linux	< any	UNKNOWN
ubuntu	16.04	noarch	linux	< 4.4.0-240.274	UNKNOWN
ubuntu	18.04	noarch	linux-aws	< 4.15.0-1155.168	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1101.109	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1035.39	UNKNOWN
ubuntu	22.10	noarch	linux-aws	< 5.19.0-1024.25	UNKNOWN