2 lines
6.4 KiB
JSON
2 lines
6.4 KiB
JSON
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","packageName":"kernel","platforms":["Linux"],"product":"Linux Kernel","repo":"https://git.kernel.org","vendor":"Linux","versions":[{"lessThan":"5.10.169","status":"affected","version":"4.14.0","versionType":"semver"},{"lessThan":"5.15.95","status":"affected","version":"5.11.0","versionType":"semver"},{"lessThan":"6.1.13","status":"affected","version":"5.16.0","versionType":"semver"},{"status":"unaffected","version":"6.2.0","versionType":"semver"},{"status":"unaffected","version":"ee059170b1f7e94e55fa6cadee544e176a6e59c2","versionType":"git"}]}],"source":"cve-coordination@google.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"D331CADA-2EA6-4EA6-879D-6C266057BB64","versionEndExcluding":"5.10.169","versionStartIncluding":"4.14","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"8508F80E-8588-4976-A2BA-7A2D85018C4E","versionEndExcluding":"5.15.95","versionStartIncluding":"5.11","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"CE354BE6-0C0F-47EB-AD8A-1433F041AC20","versionEndExcluding":"6.1.13","versionStartIncluding":"5.16","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*","matchCriteriaId":"FF501633-2F44-4913-A8EE-B021929F49F6","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*","matchCriteriaId":"2BDA597B-CAC1-4DF0-86F0-42E142C654E9","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*","matchCriteriaId":"725C78C9-12CE-406F-ABE8-0813A01D66E8","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*","matchCriteriaId":"A127C155-689C-4F67-B146-44A57F4BFD85","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*","matchCriteriaId":"D34127CC-68F5-4703-A5F6-5006F803E4AE","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*","matchCriteriaId":"4AB8D555-648E-4F2F-98BD-3E7F45BD12A8","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.2:rc7:*:*:*:*:*:*","matchCriteriaId":"C64BDD9D-C663-4E75-AE06-356EDC392B82","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.2:rc8:*:*:*:*:*:*","matchCriteriaId":"26544390-88E4-41CA-98BF-7BB1E9D4E243","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the destroyed tcf_ext. A local attacker user can use this vulnerability to elevate its privileges to root.\n\n\nThis issue affects Linux Kernel: from 4.14 before git commit ee059170b1f7e94e55fa6cadee544e176a6e59c2."}],"id":"CVE-2023-1281","lastModified":"2026-07-30T17:16:26.097","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"cve-coordination@google.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-1281","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-03-05T18:43:38.013720Z","version":"2.0.3"}}]},"published":"2023-03-22T14:15:16.090","references":[{"source":"cve-coordination@google.com","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/04/11/3"},{"source":"cve-coordination@google.com","tags":["Patch","Vendor Advisory"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ee059170b1f7e94e55fa6cadee544e176a6e59c2"},{"source":"cve-coordination@google.com","tags":["Patch","Vendor Advisory"],"url":"https://kernel.dance/#ee059170b1f7e94e55fa6cadee544e176a6e59c2"},{"source":"cve-coordination@google.com","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html"},{"source":"cve-coordination@google.com","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"},{"source":"cve-coordination@google.com","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20230427-0004/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/04/11/3"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ee059170b1f7e94e55fa6cadee544e176a6e59c2"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://kernel.dance/#ee059170b1f7e94e55fa6cadee544e176a6e59c2"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20230427-0004/"}],"sourceIdentifier":"cve-coordination@google.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"cve-coordination@google.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-416"}],"source":"nvd@nist.gov","type":"Primary"}]}
|