Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2023-6932
HistoryDec 19, 2023 - 12:00 a.m.

CVE-2023-6932

2023-12-1900:00:00
ubuntu.com
ubuntu.com
10
linux kernel
use-after-free
local privilege escalation
ipv4
igmp
race condition
rcu
bugzilla
unprivileged user namespaces

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A use-after-free vulnerability in the Linux kernel’s ipv4: igmp component
can be exploited to achieve local privilege escalation. A race condition
can be exploited to cause a timer be mistakenly registered on a RCU read
locked object which is freed by another thread. We recommend upgrading past
commit e2b706c691905fe78468c361aaabc719d0a496f1.

Bugs

Notes

Author Note
Priority reason: By using unprivileged user namespaces, this can be exploited to achieve local privilege escalation.
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-221.232UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-170.188UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-92.102UNKNOWN
ubuntu23.10noarchlinux< 6.5.0-15.15UNKNOWN
ubuntu14.04noarchlinux< 3.13.0-195.246UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-250.284UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1164.177UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1117.127UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1052.57UNKNOWN
ubuntu23.10noarchlinux-aws< 6.5.0-1012.12UNKNOWN
Rows per page:
1-10 of 881

References

Related

nessus 81
openvas 44
cve 2
osv 20
cbl_mariner 2
nvd 2
debiancve 1
redhatcve 1
ubuntu 19
cvelist 1
prion 2
ubuntucve 1
amazon 2
ibm 2
ics 1
photon 3
redhat 9
cloudlinux 2
chrome 1
debian 3
nessus
nessus
SUSE SLES15 Security Update : kernel (Live Patch 45 for SLE 15 SP1) (SUSE-SU-2024:0418-1)
2024-02-07 00:00:00
SUSE SLES15 Security Update : kernel RT (Live Patch 17 for SLE 15 SP4) (SUSE-SU-2024:0339-1)
2024-02-06 00:00:00
SUSE SLES12 / SLES15 Security Update : kernel (Live Patch 39 for SLE 15 SP1) (SUSE-SU-2024:0362-1)
2024-02-07 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6601-1)
2024-01-26 00:00:00
openSUSE: Security Advisory for the Linux Kernel (Live Patch 21 for SLE 15 SP4) (SUSE-SU-2024:0429-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for the Linux Kernel (Live Patch 35 for SLE 15 SP3) (SUSE-SU-2024:0411-1)
2024-03-04 00:00:00
cve
cve
CVE-2023-6932
2023-12-19 14:15:08
CVE-2024-0584
2024-01-16 14:15:49
osv
osv
linux vulnerability
2024-01-25 19:32:56
linux-aws vulnerabilities
2024-01-25 20:24:48
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities
2024-01-25 22:06:42
cbl_mariner
cbl_mariner
CVE-2023-6932 affecting package kernel for versions less than 6.6.29.1-4
2024-06-21 09:32:44
CVE-2023-6932 affecting package kernel for versions less than 5.15.143.1-1
2024-01-19 03:54:24
nvd
nvd
CVE-2023-6932
2023-12-19 14:15:08
CVE-2024-0584
2024-01-16 14:15:49
debiancve
debiancve
CVE-2023-6932
2023-12-19 14:15:08
redhatcve
redhatcve
CVE-2023-6932
2023-12-19 21:46:48
ubuntu
ubuntu
Linux kernel vulnerability
2024-01-25 00:00:00
Linux kernel (AWS) vulnerabilities
2024-01-25 00:00:00
Linux kernel (KVM) vulnerabilities
2024-01-29 00:00:00
cvelist
cvelist
CVE-2023-6932 Use-after-free in Linux kernel's ipv4: igmp component
2023-12-19 14:09:15
prion
prion
Race condition
2023-12-19 14:15:00
Design/Logic Flaw
2024-01-16 14:15:00
ubuntucve
ubuntucve
CVE-2024-0584
2024-01-16 00:00:00
amazon
amazon
Important: kernel
2024-01-03 22:37:00
Important: kernel
2024-01-03 21:04:00
ibm
ibm
Security Bulletin: Multiple Linux Kernel vulnerabilities affect IBM Storage Scale System.
2024-06-21 12:54:56
Security Bulletin: IBM Security Guardium is affected by multiple Linux Kernel vulnerabilities
2024-05-15 17:32:24
ics
ics
Siemens SIMATIC S7-1500
2024-04-11 12:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-4.0-0548
2024-01-13 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0713
2024-01-16 00:00:00
Critical Photon OS Security Update - PHSA-2024-5.0-0187
2024-01-09 00:00:00
redhat
redhat
(RHSA-2024:0723) Important: kernel security update
2024-02-07 16:01:23
(RHSA-2024:0725) Important: kernel-rt security update
2024-02-07 16:03:29
(RHSA-2024:0735) Critical: OpenShift Container Platform 4.14.12 bug fix and security update
2024-02-13 17:16:53
cloudlinux
cloudlinux
kernel: Fix of 13 CVEs
2024-01-17 12:28:37
kernel: Fix of 13 CVEs
2024-01-17 12:32:48
chrome
chrome
Stable Channel Update for ChromeOS / ChromeOS Flex
2024-02-07 00:00:00
debian
debian
[SECURITY] [DSA 5594-1] linux security update
2024-01-02 21:05:08
[SECURITY] [DLA 3711-1] linux-5.10 security update
2024-01-11 17:58:27
[SECURITY] [DLA 3710-1] linux security update
2024-01-11 18:20:04

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON
Related for UB:CVE-2023-6932
nessus81openvas44cve2osv20cbl_mariner2nvd2debiancve1redhatcve1ubuntu19cvelist1prion2ubuntucve1amazon2ibm2ics1photon3redhat9cloudlinux2chrome1debian3