Linux kernel vulnerability

2023-04-2700:00:00

ubuntu.com

ubuntu

kernel

security

vulnerability

aws

azure

gcp

hwe

ibm

kvm

oracle

cve

privileges

tcindex

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

17.1%

JSON

Releases

Ubuntu 20.04 LTS
Ubuntu 18.04 ESM
Ubuntu 16.04 ESM
Ubuntu 14.04 ESM

Packages

linux - Linux kernel
linux-aws - Linux kernel for Amazon Web Services (AWS) systems
linux-aws-5.4 - Linux kernel for Amazon Web Services (AWS) systems
linux-azure - Linux kernel for Microsoft Azure Cloud systems
linux-azure-4.15 - Linux kernel for Microsoft Azure Cloud systems
linux-azure-5.4 - Linux kernel for Microsoft Azure cloud systems
linux-gcp - Linux kernel for Google Cloud Platform (GCP) systems
linux-gcp-4.15 - Linux kernel for Google Cloud Platform (GCP) systems
linux-gcp-5.4 - Linux kernel for Google Cloud Platform (GCP) systems
linux-gke - Linux kernel for Google Container Engine (GKE) systems
linux-gkeop - Linux kernel for Google Container Engine (GKE) systems
linux-hwe - Linux hardware enablement (HWE) kernel
linux-hwe-5.4 - Linux hardware enablement (HWE) kernel
linux-ibm - Linux kernel for IBM cloud systems
linux-kvm - Linux kernel for cloud environments
linux-oracle - Linux kernel for Oracle Cloud systems
linux-oracle-5.4 - Linux kernel for Oracle Cloud systems

Details

It was discovered that the Traffic-Control Index (TCINDEX) implementation
in the Linux kernel did not properly perform filter deactivation in some
situations. A local attacker could possibly use this to gain elevated
privileges. Please note that with the fix for this CVE, kernel support for
the TCINDEX classifier has been removed.

OSVersionArchitecturePackageVersionFilename
Ubuntu20.04noarchlinux-image-generic-hwe-18.04< 5.4.0.148.146UNKNOWN
Ubuntu20.04noarchlinux-cloud-tools-generic< 5.4.0.148.146UNKNOWN
Ubuntu20.04noarchlinux-cloud-tools-generic-hwe-18.04< 5.4.0.148.146UNKNOWN
Ubuntu20.04noarchlinux-cloud-tools-generic-hwe-18.04-edge< 5.4.0.148.146UNKNOWN
Ubuntu20.04noarchlinux-cloud-tools-lowlatency< 5.4.0.148.146UNKNOWN
Ubuntu20.04noarchlinux-cloud-tools-lowlatency-hwe-18.04< 5.4.0.148.146UNKNOWN
Ubuntu20.04noarchlinux-cloud-tools-lowlatency-hwe-18.04-edge< 5.4.0.148.146UNKNOWN
Ubuntu20.04noarchlinux-cloud-tools-virtual< 5.4.0.148.146UNKNOWN
Ubuntu20.04noarchlinux-cloud-tools-virtual-hwe-18.04< 5.4.0.148.146UNKNOWN
Ubuntu20.04noarchlinux-cloud-tools-virtual-hwe-18.04-edge< 5.4.0.148.146UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	20.04	noarch	linux-image-generic-hwe-18.04	< 5.4.0.148.146	UNKNOWN
Ubuntu	20.04	noarch	linux-cloud-tools-generic	< 5.4.0.148.146	UNKNOWN
Ubuntu	20.04	noarch	linux-cloud-tools-generic-hwe-18.04	< 5.4.0.148.146	UNKNOWN
Ubuntu	20.04	noarch	linux-cloud-tools-generic-hwe-18.04-edge	< 5.4.0.148.146	UNKNOWN
Ubuntu	20.04	noarch	linux-cloud-tools-lowlatency	< 5.4.0.148.146	UNKNOWN
Ubuntu	20.04	noarch	linux-cloud-tools-lowlatency-hwe-18.04	< 5.4.0.148.146	UNKNOWN
Ubuntu	20.04	noarch	linux-cloud-tools-lowlatency-hwe-18.04-edge	< 5.4.0.148.146	UNKNOWN
Ubuntu	20.04	noarch	linux-cloud-tools-virtual	< 5.4.0.148.146	UNKNOWN
Ubuntu	20.04	noarch	linux-cloud-tools-virtual-hwe-18.04	< 5.4.0.148.146	UNKNOWN
Ubuntu	20.04	noarch	linux-cloud-tools-virtual-hwe-18.04-edge	< 5.4.0.148.146	UNKNOWN