Design/Logic Flaw

2023-07-2121:15:00

PRIOn knowledge base

www.prio-n.com

use-after-free

linux kernel

local privilege escalation

vulnerability

nvd

logic flaw.

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A use-after-free vulnerability in the Linux kernel’s net/sched: cls_u32 component can be exploited to achieve local privilege escalation.

If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.

We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.

CPENameOperatorVersion
debian_linuxeq10.0
debian_linuxeq11.0
linux_kerneleq6.4 rc1
linux_kerneleq6.4 rc4
linux_kerneleq6.4 rc5
linux_kerneleq6.4 rc6
linux_kerneleq6.4 rc2
linux_kerneleq6.4 rc3
linux_kernelge4.14
linux_kernellt6.4

Name	Operator	Version
debian_linux	eq	10.0
debian_linux	eq	11.0
linux_kernel	eq	6.4 rc1
linux_kernel	eq	6.4 rc4
linux_kernel	eq	6.4 rc5
linux_kernel	eq	6.4 rc6
linux_kernel	eq	6.4 rc2
linux_kernel	eq	6.4 rc3
linux_kernel	ge	4.14
linux_kernel	lt	6.4