PT-2023-6959 · Linux+4 · Linux Kernel+4

Lonial Kong · Publicado 2023-11-08 · Atualizado 2025-03-20 · CVE-2023-6111

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free vulnerability in the Linux kernel's netfilter: nf tables component can be exploited to achieve local privilege escalation. The function nft trans gc catchall did not remove the catchall set element from the catchall list when the argument sync is true, making it possible to free a catchall set element many times.

Recommendations Upgrade past commit 93995bf4af2c5a99e2a87f0cd5ce547d31eb7630 to resolve the issue. As a temporary workaround, consider restricting access to the nft trans gc catchall function until a patch is available.

Exploit

Correção

LPE

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2024-10855

ALT-PU-2024-1867

AZL-32122

AZL-34865

BDU:2023-07978

CVE-2023-6111

USN-6576-1

Produtos afetados

Alt Linux

Linuxmint

Linux Kernel

Red Os

Ubuntu

Referências · 41

• 🔥 https://github.com/google/security-research/tree/master/pocs/linux/kernelctf · Exploit
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-kernel-lt-181224 · Nota
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/3S55P23EYAWDHXZPJEVTGIRZZRICYI3Z · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2023-6111 · Nota de Segurança
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.13 · Nota
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=93995bf4af2c5a99e2a87f0cd5ce547d31eb7630 · Correção
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.140 · Nota
• https://ubuntu.com/security/notices/USN-6576-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/AZL-34865 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-6111 · Nota de Segurança
• https://osv.dev/vulnerability/BELL-CVE-2023-6111 · Aviso do Fabricante
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.10 · Nota
• https://twitter.com/gcpweekly/status/1747748250403184800 · Publicação no Twitter
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/3OXWBKK7RTQOGGDLQGCZFS753VLGS2GD · Aviso do Fabricante
• https://redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-kernel-lt-181224/?sphrase_id=612588 · Nota