PT-2023-1009 · Linux+10 · Linux Kernel+10
Bing-Jhong Billy Jheng
·
Publicado
2023-05-23
·
Atualizado
2025-02-13
·
CVE-2023-4622
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A use-after-free vulnerability in the Linux kernel's af unix component can be exploited to achieve local privilege escalation. The
unix stream sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue, resulting in a race where unix stream sendpage() could access an skb locklessly that is being released by garbage collection, leading to use-after-free.Recommendations
Upgrade past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable
unix stream sendpage() function until a patch is available.Exploit
Correção
DoS
LPE
Use After Free
Race Condition
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu