Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2023-4622
HistorySep 06, 2023 - 12:00 a.m.

CVE-2023-4622

2023-09-0600:00:00
ubuntu.com
ubuntu.com
16
linux
af_unix
use-after-free
local privilege escalation
vulnerability

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

A use-after-free vulnerability in the Linux kernel’s af_unix component can
be exploited to achieve local privilege escalation. The
unix_stream_sendpage() function tries to add data to the last skb in the
peer’s recv queue without locking the queue. Thus there is a race where
unix_stream_sendpage() could access an skb locklessly that is being
released by garbage collection, resulting in use-after-free. We recommend
upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c.

Bugs

Notes

Author Note
Priority reason: Allows local privilege escalation
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-219.230UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-165.182UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-87.97UNKNOWN
ubuntu23.04noarchlinux< 6.2.0-35.35UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-246.280UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1162.175UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1112.121UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1048.53UNKNOWN
ubuntu23.04noarchlinux-aws< 6.2.0-1014.14UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1124.130UNKNOWN
Rows per page:
1-10 of 821

References

Related

nessus 89
prion 1
redhatcve 1
osv 18
cvelist 1
cnvd 1
cbl_mariner 2
nvd 1
cve 1
debiancve 1
redhat 18
openvas 33
oraclelinux 4
virtuozzo 1
amazon 3
rocky 1
photon 3
almalinux 1
ibm 2
ubuntu 16
chrome 1
nessus
nessus
SUSE SLES12 Security Update : kernel (Live Patch 42 for SLE 12 SP5) (SUSE-SU-2023:4799-1)
2023-12-14 00:00:00
SUSE SLES12 Security Update : kernel (Live Patch 39 for SLE 12 SP5) (SUSE-SU-2023:4847-1)
2023-12-15 00:00:00
SUSE SLES12 / SLES15 Security Update : kernel (Live Patch 38 for SLE 15 SP1) (SUSE-SU-2023:4795-1)
2023-12-14 00:00:00
prion
prion
Design/Logic Flaw
2023-09-06 14:15:00
redhatcve
redhatcve
CVE-2023-4622
2023-09-06 18:35:41
osv
osv
Linux Kernel Race Condition leads to UAF in Unix Domain Socket and causes LPE in Android
2024-05-01 00:00:00
Important: kernel security update
2024-01-10 00:00:00
Important: kernel-rt security update
2024-01-12 19:57:11
cvelist
cvelist
CVE-2023-4622 Use-after-free in Linux kernel's af_unix component
2023-09-06 13:56:56
cnvd
cnvd
Linux kernel elevation of privilege vulnerability (CNVD-2023-70080)
2023-09-11 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-4622 affecting package hyperv-daemons for versions less than 5.15.135.1-1
2023-11-08 02:07:28
CVE-2023-4622 affecting package kernel for versions less than 5.15.131.1-2
2023-09-27 18:02:50
nvd
nvd
CVE-2023-4622
2023-09-06 14:15:12
cve
cve
CVE-2023-4622
2023-09-06 14:15:12
debiancve
debiancve
CVE-2023-4622
2023-09-06 14:15:12
redhat
redhat
(RHSA-2024:1960) Important: kpatch-patch security update
2024-04-23 00:08:42
(RHSA-2024:0089) Important: kpatch-patch security update
2024-01-09 09:00:48
(RHSA-2024:0376) Important: kpatch-patch security update
2024-01-23 17:13:31
openvas
openvas
openSUSE: Security Advisory for the Linux Kernel (Live Patch 36 for SLE 15 SP3) (SUSE-SU-2023:4836-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for the Linux Kernel (Live Patch 27 for SLE 15 SP3) (SUSE-SU-2023:4871-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for the Linux Kernel RT (Live Patch 5 for SLE 15 SP5) (SUSE-SU-2023:4775-1)
2024-03-04 00:00:00
oraclelinux
oraclelinux
kernel security update
2024-01-11 00:00:00
kernel security and bug fix update
2024-04-23 00:00:00
kernel security update
2024-01-26 00:00:00
virtuozzo
virtuozzo
[Important] [Security] Virtuozzo ReadyKernel Patch 163.1 for Virtuozzo Hybrid Server 7.5
2023-11-07 00:00:00
amazon
amazon
Important: kernel
2023-09-27 22:48:00
Important: kernel
2023-09-27 22:15:00
Important: kernel
2023-09-27 22:48:00
rocky
rocky
kernel-rt security update
2024-01-12 19:57:11
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0474
2023-09-17 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0656
2023-09-27 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0101
2023-09-26 00:00:00
almalinux
almalinux
Important: kernel security update
2024-01-10 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in OpenSSL, Linux Kernel might affect IBM Storage Copy Data Management
2024-03-22 16:04:46
Security Bulletin: Multiple Linux Kernel vulnerabilities may affect IBM Storage Scale System
2024-04-04 11:02:32
ubuntu
ubuntu
Linux kernel (OEM) vulnerabilities
2023-10-04 00:00:00
Linux kernel (GCP) vulnerabilities
2023-10-23 00:00:00
Linux kernel vulnerabilities
2023-10-19 00:00:00
chrome
chrome
Stable Channel Update for ChromeOS / ChromeOS Flex
2023-09-26 00:00:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON
Related for UB:CVE-2023-4622
nessus89prion1redhatcve1osv18cvelist1cnvd1cbl_mariner2nvd1cve1debiancve1redhat18openvas33oraclelinux4virtuozzo1amazon3rocky1photon3almalinux1ibm2ubuntu16chrome1