vulnerability

Ubuntu: (Multiple Advisories) (CVE-2023-3609): Linux kernel (OEM) vulnerabilities

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
7	(AV:L/AC:L/Au:S/C:C/I:C/A:C)	2023-07-21	2023-08-14	2025-02-20

Severity

CVSS

(AV:L/AC:L/Au:S/C:C/I:C/A:C)

Published

2023-07-21

Added

2023-08-14

Modified

2025-02-20

Description

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.

If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.

We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.

Solution(s)

ubuntu-upgrade-linux-image-5-15-0-1026-gkeopubuntu-upgrade-linux-image-5-15-0-1031-nvidiaubuntu-upgrade-linux-image-5-15-0-1031-nvidia-lowlatencyubuntu-upgrade-linux-image-5-15-0-1036-ibmubuntu-upgrade-linux-image-5-15-0-1036-raspiubuntu-upgrade-linux-image-5-15-0-1038-intel-iotgubuntu-upgrade-linux-image-5-15-0-1040-gcpubuntu-upgrade-linux-image-5-15-0-1040-gkeubuntu-upgrade-linux-image-5-15-0-1040-kvmubuntu-upgrade-linux-image-5-15-0-1041-oracleubuntu-upgrade-linux-image-5-15-0-1043-awsubuntu-upgrade-linux-image-5-15-0-1045-azureubuntu-upgrade-linux-image-5-15-0-1045-azure-fdeubuntu-upgrade-linux-image-5-15-0-82-genericubuntu-upgrade-linux-image-5-15-0-82-generic-64kubuntu-upgrade-linux-image-5-15-0-82-generic-lpaeubuntu-upgrade-linux-image-5-15-0-82-lowlatencyubuntu-upgrade-linux-image-5-15-0-82-lowlatency-64kubuntu-upgrade-linux-image-5-4-0-1028-xilinx-zynqmpubuntu-upgrade-linux-image-5-4-0-1056-ibmubuntu-upgrade-linux-image-5-4-0-1070-bluefieldubuntu-upgrade-linux-image-5-4-0-1075-gkeopubuntu-upgrade-linux-image-5-4-0-1092-raspiubuntu-upgrade-linux-image-5-4-0-1097-kvmubuntu-upgrade-linux-image-5-4-0-1107-oracleubuntu-upgrade-linux-image-5-4-0-1108-awsubuntu-upgrade-linux-image-5-4-0-1111-gcpubuntu-upgrade-linux-image-5-4-0-1114-azureubuntu-upgrade-linux-image-5-4-0-159-genericubuntu-upgrade-linux-image-5-4-0-159-generic-lpaeubuntu-upgrade-linux-image-5-4-0-159-lowlatencyubuntu-upgrade-linux-image-6-0-0-1021-oemubuntu-upgrade-linux-image-6-1-0-1019-oemubuntu-upgrade-linux-image-6-2-0-1003-starfiveubuntu-upgrade-linux-image-6-2-0-1008-ibmubuntu-upgrade-linux-image-6-2-0-1010-awsubuntu-upgrade-linux-image-6-2-0-1010-azureubuntu-upgrade-linux-image-6-2-0-1010-oracleubuntu-upgrade-linux-image-6-2-0-1011-kvmubuntu-upgrade-linux-image-6-2-0-1011-lowlatencyubuntu-upgrade-linux-image-6-2-0-1011-lowlatency-64kubuntu-upgrade-linux-image-6-2-0-1011-raspiubuntu-upgrade-linux-image-6-2-0-1012-gcpubuntu-upgrade-linux-image-6-2-0-31-genericubuntu-upgrade-linux-image-6-2-0-31-generic-64kubuntu-upgrade-linux-image-6-2-0-31-generic-lpaeubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-aws-lts-20-04ubuntu-upgrade-linux-image-aws-lts-22-04ubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-azure-cvmubuntu-upgrade-linux-image-azure-fde-lts-22-04ubuntu-upgrade-linux-image-azure-lts-20-04ubuntu-upgrade-linux-image-azure-lts-22-04ubuntu-upgrade-linux-image-bluefieldubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-gcp-lts-20-04ubuntu-upgrade-linux-image-gcp-lts-22-04ubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-64kubuntu-upgrade-linux-image-generic-64k-hwe-20-04ubuntu-upgrade-linux-image-generic-64k-hwe-22-04ubuntu-upgrade-linux-image-generic-hwe-18-04ubuntu-upgrade-linux-image-generic-hwe-20-04ubuntu-upgrade-linux-image-generic-hwe-22-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-18-04ubuntu-upgrade-linux-image-generic-lpae-hwe-20-04ubuntu-upgrade-linux-image-generic-lpae-hwe-22-04ubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-gke-5-15ubuntu-upgrade-linux-image-gkeopubuntu-upgrade-linux-image-gkeop-5-15ubuntu-upgrade-linux-image-gkeop-5-4ubuntu-upgrade-linux-image-ibmubuntu-upgrade-linux-image-ibm-lts-20-04ubuntu-upgrade-linux-image-intelubuntu-upgrade-linux-image-intel-iotgubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-64kubuntu-upgrade-linux-image-lowlatency-64k-hwe-20-04ubuntu-upgrade-linux-image-lowlatency-64k-hwe-22-04ubuntu-upgrade-linux-image-lowlatency-hwe-18-04ubuntu-upgrade-linux-image-lowlatency-hwe-20-04ubuntu-upgrade-linux-image-lowlatency-hwe-22-04ubuntu-upgrade-linux-image-nvidiaubuntu-upgrade-linux-image-nvidia-lowlatencyubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-oem-20-04ubuntu-upgrade-linux-image-oem-20-04bubuntu-upgrade-linux-image-oem-20-04cubuntu-upgrade-linux-image-oem-20-04dubuntu-upgrade-linux-image-oem-22-04bubuntu-upgrade-linux-image-oem-22-04cubuntu-upgrade-linux-image-oem-osp1ubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-oracle-lts-20-04ubuntu-upgrade-linux-image-oracle-lts-22-04ubuntu-upgrade-linux-image-raspiubuntu-upgrade-linux-image-raspi-hwe-18-04ubuntu-upgrade-linux-image-raspi-nolpaeubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragon-hwe-18-04ubuntu-upgrade-linux-image-starfiveubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-hwe-18-04ubuntu-upgrade-linux-image-virtual-hwe-20-04ubuntu-upgrade-linux-image-virtual-hwe-22-04ubuntu-upgrade-linux-image-xilinx-zynqmp

References

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today