vulnerability
Ubuntu: (Multiple Advisories) (CVE-2023-4622): Linux kernel (OEM) vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:M/Au:S/C:C/I:C/A:C) | Sep 6, 2023 | Oct 6, 2023 | Feb 20, 2025 |
Severity
7
CVSS
(AV:L/AC:M/Au:S/C:C/I:C/A:C)
Published
Sep 6, 2023
Added
Oct 6, 2023
Modified
Feb 20, 2025
Description
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.
The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free.
We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c.
Solution(s)
ubuntu-upgrade-linux-image-4-15-0-1125-oracleubuntu-upgrade-linux-image-4-15-0-1146-kvmubuntu-upgrade-linux-image-4-15-0-1156-gcpubuntu-upgrade-linux-image-4-15-0-1162-awsubuntu-upgrade-linux-image-4-15-0-1171-azureubuntu-upgrade-linux-image-4-15-0-219-genericubuntu-upgrade-linux-image-4-15-0-219-lowlatencyubuntu-upgrade-linux-image-4-4-0-1124-awsubuntu-upgrade-linux-image-4-4-0-1125-kvmubuntu-upgrade-linux-image-4-4-0-1162-awsubuntu-upgrade-linux-image-4-4-0-246-genericubuntu-upgrade-linux-image-4-4-0-246-lowlatencyubuntu-upgrade-linux-image-5-15-0-1031-gkeopubuntu-upgrade-linux-image-5-15-0-1039-nvidiaubuntu-upgrade-linux-image-5-15-0-1039-nvidia-lowlatencyubuntu-upgrade-linux-image-5-15-0-1041-ibmubuntu-upgrade-linux-image-5-15-0-1041-raspiubuntu-upgrade-linux-image-5-15-0-1043-intel-iotgubuntu-upgrade-linux-image-5-15-0-1045-gcpubuntu-upgrade-linux-image-5-15-0-1045-gkeubuntu-upgrade-linux-image-5-15-0-1045-kvmubuntu-upgrade-linux-image-5-15-0-1046-oracleubuntu-upgrade-linux-image-5-15-0-1048-awsubuntu-upgrade-linux-image-5-15-0-1050-azureubuntu-upgrade-linux-image-5-15-0-1050-azure-fdeubuntu-upgrade-linux-image-5-15-0-87-genericubuntu-upgrade-linux-image-5-15-0-87-generic-64kubuntu-upgrade-linux-image-5-15-0-87-generic-lpaeubuntu-upgrade-linux-image-5-15-0-87-lowlatencyubuntu-upgrade-linux-image-5-15-0-87-lowlatency-64kubuntu-upgrade-linux-image-5-4-0-1024-iotubuntu-upgrade-linux-image-5-4-0-1032-xilinx-zynqmpubuntu-upgrade-linux-image-5-4-0-1059-ibmubuntu-upgrade-linux-image-5-4-0-1073-bluefieldubuntu-upgrade-linux-image-5-4-0-1079-gkeopubuntu-upgrade-linux-image-5-4-0-1096-raspiubuntu-upgrade-linux-image-5-4-0-1101-kvmubuntu-upgrade-linux-image-5-4-0-1111-oracleubuntu-upgrade-linux-image-5-4-0-1112-awsubuntu-upgrade-linux-image-5-4-0-1116-gcpubuntu-upgrade-linux-image-5-4-0-1118-azureubuntu-upgrade-linux-image-5-4-0-165-genericubuntu-upgrade-linux-image-5-4-0-165-generic-lpaeubuntu-upgrade-linux-image-5-4-0-165-lowlatencyubuntu-upgrade-linux-image-6-1-0-1023-oemubuntu-upgrade-linux-image-6-2-0-1007-starfiveubuntu-upgrade-linux-image-6-2-0-1011-nvidiaubuntu-upgrade-linux-image-6-2-0-1011-nvidia-64kubuntu-upgrade-linux-image-6-2-0-1014-awsubuntu-upgrade-linux-image-6-2-0-1014-oracleubuntu-upgrade-linux-image-6-2-0-1015-azureubuntu-upgrade-linux-image-6-2-0-1015-azure-fdeubuntu-upgrade-linux-image-6-2-0-1015-kvmubuntu-upgrade-linux-image-6-2-0-1015-lowlatencyubuntu-upgrade-linux-image-6-2-0-1015-lowlatency-64kubuntu-upgrade-linux-image-6-2-0-1015-raspiubuntu-upgrade-linux-image-6-2-0-1017-gcpubuntu-upgrade-linux-image-6-2-0-35-genericubuntu-upgrade-linux-image-6-2-0-35-generic-64kubuntu-upgrade-linux-image-6-2-0-35-generic-lpaeubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-aws-hweubuntu-upgrade-linux-image-aws-lts-18-04ubuntu-upgrade-linux-image-aws-lts-20-04ubuntu-upgrade-linux-image-aws-lts-22-04ubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-azure-cvmubuntu-upgrade-linux-image-azure-fdeubuntu-upgrade-linux-image-azure-fde-lts-22-04ubuntu-upgrade-linux-image-azure-lts-18-04ubuntu-upgrade-linux-image-azure-lts-20-04ubuntu-upgrade-linux-image-azure-lts-22-04ubuntu-upgrade-linux-image-bluefieldubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-gcp-lts-18-04ubuntu-upgrade-linux-image-gcp-lts-20-04ubuntu-upgrade-linux-image-gcp-lts-22-04ubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-64kubuntu-upgrade-linux-image-generic-64k-hwe-20-04ubuntu-upgrade-linux-image-generic-64k-hwe-22-04ubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-hwe-18-04ubuntu-upgrade-linux-image-generic-hwe-20-04ubuntu-upgrade-linux-image-generic-hwe-22-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-20-04ubuntu-upgrade-linux-image-generic-lpae-hwe-22-04ubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-gke-5-15ubuntu-upgrade-linux-image-gkeopubuntu-upgrade-linux-image-gkeop-5-15ubuntu-upgrade-linux-image-gkeop-5-4ubuntu-upgrade-linux-image-ibmubuntu-upgrade-linux-image-ibm-lts-20-04ubuntu-upgrade-linux-image-intelubuntu-upgrade-linux-image-intel-iotgubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-64kubuntu-upgrade-linux-image-lowlatency-64k-hwe-20-04ubuntu-upgrade-linux-image-lowlatency-64k-hwe-22-04ubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-lowlatency-hwe-18-04ubuntu-upgrade-linux-image-lowlatency-hwe-20-04ubuntu-upgrade-linux-image-lowlatency-hwe-22-04ubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-nvidiaubuntu-upgrade-linux-image-nvidia-6-2ubuntu-upgrade-linux-image-nvidia-64k-6-2ubuntu-upgrade-linux-image-nvidia-64k-hwe-22-04ubuntu-upgrade-linux-image-nvidia-hwe-22-04ubuntu-upgrade-linux-image-nvidia-lowlatencyubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-oem-20-04ubuntu-upgrade-linux-image-oem-20-04bubuntu-upgrade-linux-image-oem-20-04cubuntu-upgrade-linux-image-oem-20-04dubuntu-upgrade-linux-image-oem-22-04aubuntu-upgrade-linux-image-oem-22-04bubuntu-upgrade-linux-image-oem-22-04cubuntu-upgrade-linux-image-oem-osp1ubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-oracle-lts-18-04ubuntu-upgrade-linux-image-oracle-lts-20-04ubuntu-upgrade-linux-image-oracle-lts-22-04ubuntu-upgrade-linux-image-raspiubuntu-upgrade-linux-image-raspi-hwe-18-04ubuntu-upgrade-linux-image-raspi-nolpaeubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragon-hwe-18-04ubuntu-upgrade-linux-image-starfiveubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-hwe-16-04ubuntu-upgrade-linux-image-virtual-hwe-18-04ubuntu-upgrade-linux-image-virtual-hwe-20-04ubuntu-upgrade-linux-image-virtual-hwe-22-04ubuntu-upgrade-linux-image-virtual-lts-xenialubuntu-upgrade-linux-image-xilinx-zynqmp
References
- CVE-2023-4622
- https://attackerkb.com/topics/CVE-2023-4622
- UBUNTU-USN-6415-1
- UBUNTU-USN-6439-1
- UBUNTU-USN-6439-2
- UBUNTU-USN-6440-1
- UBUNTU-USN-6440-2
- UBUNTU-USN-6440-3
- UBUNTU-USN-6441-1
- UBUNTU-USN-6441-2
- UBUNTU-USN-6441-3
- UBUNTU-USN-6442-1
- UBUNTU-USN-6444-1
- UBUNTU-USN-6444-2
- UBUNTU-USN-6445-1
- UBUNTU-USN-6445-2
- UBUNTU-USN-6446-1
- UBUNTU-USN-6446-2
- UBUNTU-USN-6446-3
- UBUNTU-USN-6466-1
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.