{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageName":"kernel","product":"Linux Kernel","repo":"https://git.kernel.org","vendor":"Linux","versions":[{"lessThan":"2c02d41d71f90a5168391b6a5f2954112ba2307c","status":"affected","version":"0","versionType":"git"}]}],"source":"cve-coordination@google.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"D375FAEB-F480-4787-A5D8-E1012F3089DE","versionEndExcluding":"4.14.303","versionStartIncluding":"4.13.0","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"E60D856E-8039-4750-B1B9-7A01D40BBCE6","versionEndExcluding":"4.19.270","versionStartIncluding":"4.19","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"E4A27F20-0847-4A4D-8BF9-1EE6B2E80E41","versionEndExcluding":"5.4.229","versionStartIncluding":"5.4","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"CE4DEDD1-2BE5-40F9-8FBB-C0E7E01EF072","versionEndExcluding":"5.10.163","versionStartIncluding":"5.10","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"BEB9094F-84DB-4514-BCD4-B815185BBBF5","versionEndExcluding":"5.15.88","versionStartIncluding":"5.15","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"7E070665-7647-450B-AB3D-C01637029C9D","versionEndExcluding":"6.0.19","versionStartIncluding":"6.0","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"8C1E7766-4310-43F9-BAC4-3763A36C043A","versionEndExcluding":"6.1.5","versionStartIncluding":"6.1","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*","matchCriteriaId":"FF501633-2F44-4913-A8EE-B021929F49F6","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*","matchCriteriaId":"2BDA597B-CAC1-4DF0-86F0-42E142C654E9","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not require any privilege.\n\nThere is a use-after-free bug of icsk_ulp_data of a struct inet_connection_sock.\n\nWhen CONFIG_TLS is enabled, user can install a tls context (struct tls_context) on a connected tcp socket. The context is not cleared if this socket is disconnected and reused as a listener. If a new socket is created from the listener, the context is inherited and vulnerable.\n\nThe setsockopt TCP_ULP operation does not require any privilege.\n\nWe recommend upgrading past commit 2c02d41d71f90a5168391b6a5f2954112ba2307c"}],"id":"CVE-2023-0461","lastModified":"2026-06-17T05:25:36.220","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"cve-coordination@google.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-0461","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-08-01T15:55:09.289052Z","version":"2.0.3"}}]},"published":"2023-02-28T15:15:11.550","references":[{"source":"cve-coordination@google.com","tags":["Mailing List","Patch"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2c02d41d71f90a5168391b6a5f2954112ba2307c"},{"source":"cve-coordination@google.com","tags":["Patch"],"url":"https://kernel.dance/#2c02d41d71f90a5168391b6a5f2954112ba2307c"},{"source":"cve-coordination@google.com","tags":["Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html"},{"source":"cve-coordination@google.com","tags":["Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2c02d41d71f90a5168391b6a5f2954112ba2307c"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://kernel.dance/#2c02d41d71f90a5168391b6a5f2954112ba2307c"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://security.netapp.com/advisory/ntap-20230331-0006/"}],"sourceIdentifier":"cve-coordination@google.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"cve-coordination@google.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-416"}],"source":"nvd@nist.gov","type":"Primary"}]}