2 lines
6.2 KiB
JSON
2 lines
6.2 KiB
JSON
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","packageName":"kernel","platforms":["Linux"],"product":"Linux Kernel","repo":"https://git.kernel.org","vendor":"Linux","versions":[{"lessThan":"4.14.308","status":"affected","version":"3.8.0","versionType":"semver"},{"lessThan":"4.19.276","status":"affected","version":"4.15.0","versionType":"semver"},{"lessThan":"5.4.235","status":"affected","version":"4.20.0","versionType":"semver"},{"lessThan":"5.10.173","status":"affected","version":"5.5.0","versionType":"semver"},{"lessThan":"5.15.100","status":"affected","version":"5.11.0","versionType":"semver"},{"lessThan":"6.1.18","status":"affected","version":"5.16.0","versionType":"semver"},{"lessThan":"6.2.5","status":"affected","version":"6.2.0","versionType":"semver"},{"status":"unaffected","version":"6.3.0","versionType":"semver"},{"status":"unaffected","version":"8c710f75256bb3cf05ac7b1672c82b92c43f3d28","versionType":"git"}]}],"source":"cve-coordination@google.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"C56CFB26-8D6C-4A3D-99C5-DA43FA59DB77","versionEndExcluding":"4.14.308","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"C902FC54-DDBD-4DA6-BFEF-26889A267464","versionEndExcluding":"4.19.276","versionStartIncluding":"4.15","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"13DD5E68-8CB4-46EE-9A8F-C7F6C1A84430","versionEndExcluding":"5.4.235","versionStartIncluding":"4.20","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"4D810CFB-B7C5-493C-B98A-0D5F0D8A47B6","versionEndExcluding":"5.10.173","versionStartIncluding":"5.5","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"6D7E5BB5-018B-46B7-A2C4-1ADB75099822","versionEndExcluding":"5.15.100","versionStartIncluding":"5.11","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"C8D24FD5-5A98-4042-9419-39DCFCBEFFF5","versionEndExcluding":"6.1.18","versionStartIncluding":"5.16","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"0575B33B-A320-4E51-84CA-10C937341E02","versionEndExcluding":"6.2.5","versionStartIncluding":"6.2","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root.\n\n\nWe recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/ ."}],"id":"CVE-2023-1829","lastModified":"2026-07-29T15:16:18.330","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"cve-coordination@google.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-1829","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-02-07T15:50:09.128361Z","version":"2.0.3"}}]},"published":"2023-04-12T12:15:07.080","references":[{"source":"cve-coordination@google.com","tags":["Mailing List","Patch"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8c710f75256bb3cf05ac7b1672c82b92c43f3d28"},{"source":"cve-coordination@google.com","tags":["Patch"],"url":"https://kernel.dance/#8c710f75256bb3cf05ac7b1672c82b92c43f3d28"},{"source":"cve-coordination@google.com","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html"},{"source":"cve-coordination@google.com","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"},{"source":"cve-coordination@google.com","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20230601-0001/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8c710f75256bb3cf05ac7b1672c82b92c43f3d28"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://kernel.dance/#8c710f75256bb3cf05ac7b1672c82b92c43f3d28"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20230601-0001/"}],"sourceIdentifier":"cve-coordination@google.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"cve-coordination@google.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-416"}],"source":"nvd@nist.gov","type":"Primary"}]}
|