CVEvulnerability

CVE-2023-3609

7.8 HIGH Published 2023-07-21 Modified 2026-10-14 Official page ↗
Status
Modified
Published
2023-07-21
Last modified
2026-10-14
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-416

Description

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.

Affected configurations

• linux linux kernel (>= 4.14 < 4.14.322) • linux linux kernel (>= 4.15 < 4.19.291) • linux linux kernel (>= 4.20 < 5.4.248) • linux linux kernel (>= 5.5 < 5.10.185) • linux linux kernel (>= 5.11 < 5.15.118) • linux linux kernel (>= 5.16 < 6.1.35) • linux linux kernel (>= 6.2 < 6.3.9) • linux linux kernel 6.4 • debian debian linux 10.0 • debian debian linux 11.0

Related

Weakness · CWE (1)

References