PT-2023-4324 · Linux+6 · Linux Kernel+6

Alex + 1 · Published 2023-08-02 · Updated 2024-11-21 · CVE-2023-4194

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw was found in the Linux kernel's TUN/TAP functionality, which could allow a local user to bypass network filters and gain unauthorized access to some resources. The issue is related to the incorrect initialization of the socket UID in the tun chr open() and tap open() functions. This could potentially allow an attacker to impact data integrity or elevate their privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Type Confusion

Weakness Enumeration

CWE-1188

CWE-863

CWE-452

CWE-843

Related Identifiers

ALT-PU-2023-5488

ALT-PU-2024-14046

ALT-PU-2024-6818

AZL-27890

BDU:2023-04659

CVE-2023-4194

DLA-3623-1

DSA-5480-1

DSA-5492-1

OESA-2023-1584

OESA-2023-1585

OESA-2023-1586

OESA-2023-1587

OESA-2023-1588

OPENSUSE-SU-2023_3392-1

OPENSUSE-SU-2023_3599-1

OPENSUSE-SU-2023_3599-2

OPENSUSE-SU-2023_3600-1

OPENSUSE-SU-2023_3600-2

OPENSUSE-SU-2023_3656-1

OPENSUSE-SU-2023_3682-1

OPENSUSE-SU-2023_3683-1

OPENSUSE-SU-2023_3683-2

OPENSUSE-SU-2023_3684-1

OPENSUSE-SU-2023_3704-1

OPENSUSE-SU-2023_3704-2

OPENSUSE-SU-2023_3964-1

OPENSUSE-SU-2023_3969-1

OPENSUSE-SU-2023_3971-1

OPENSUSE-SU-2023_3988-1

OPENSUSE-SU-2024:13145-1

OPENSUSE-SU-2024:13704-1

RHSA-2023:6583

RHSA-2023_6583

SUSE-SU-2023:3390-1

SUSE-SU-2023:3392-1

SUSE-SU-2023:3599-1

SUSE-SU-2023:3599-2

SUSE-SU-2023:3600-1

SUSE-SU-2023:3600-2

SUSE-SU-2023:3601-1

SUSE-SU-2023:3656-1

SUSE-SU-2023:3681-1

SUSE-SU-2023:3682-1

SUSE-SU-2023:3684-1

SUSE-SU-2023:3705-1

SUSE-SU-2023:3785-1

SUSE-SU-2023:3964-1

SUSE-SU-2023:3969-1

SUSE-SU-2023:3971-1

SUSE-SU-2023:3988-1

USN-6343-1

USN-6385-1

USN-6412-1

USN-6416-1

USN-6416-2

USN-6416-3

USN-6417-1

USN-6445-1

USN-6445-2

USN-6466-1

Affected Products

Alt Linux

Linuxmint

Linux Kernel

Red Hat

Red Os

Suse

Ubuntu

References · 559

• https://ubuntu.com/security/CVE-2023-2898 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6416-3 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6466-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3390 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-38432 · Security Note
• https://osv.dev/vulnerability/DLA-3623-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3390-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3212 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4569 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-38430 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3995 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5492-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4622 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4881 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6417-1 · Vendor Advisory