CVE-2023-3609

Published Jul 21, 2023

Last updated 10 months ago

CVSS high 7.8

Overview

Description: A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.
Source: cve-coordination@google.com
NVD status: Modified

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

nvd@nist.gov: CWE-416
cve-coordination@google.com: CWE-416

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AD5A233A-2C1B-4397-AACC-92FE4E062AA9",
            "versionEndExcluding": "6.4",
            "versionStartIncluding": "4.14"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "38BC6744-7D25-4C02-9966-B224CD071D30"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "76061B41-CAE9-4467-BEDE-0FFC7956F2A1"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A717BA5B-D535-46A0-A329-A25FE5CEC588"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "89CC80C6-F1EE-4AC7-BD21-DB3217BADE87"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "41EACEA1-FB69-4AF2-BC52-D39489858D42"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc6:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9E1C36BE-F9D8-40B6-8281-5B8F9B42322D"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          },
          {
            "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 3.1

Weaknesses

Social media

Configurations

References