PT-2023-1009 · Linux+10 · Linux Kernel+10
Bing-Jhong Billy Jheng
·
Published
2023-05-23
·
Updated
2025-02-13
·
CVE-2023-4622
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A use-after-free vulnerability in the Linux kernel's af unix component can be exploited to achieve local privilege escalation. The
unix stream sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue, resulting in a race where unix stream sendpage() could access an skb locklessly that is being released by garbage collection, leading to use-after-free.Recommendations
Upgrade past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable
unix stream sendpage() function until a patch is available.Exploit
Fix
DoS
LPE
Use After Free
Race Condition
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu