CVE-2023-1281: UAF in Linux kernel's tcindex (traffic control index filter) implementation
A Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcfextsexec()' is called with the destroyed tcfext.
A local attacker user can use this vulnerability to elevate its privileges to root.
This issue affects Linux Kernel: from 4.14 before git commit ee059170b1f7e94e55fa6cadee544e176a6e59c2.
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ee059170b1f7e94e55fa6cadee544e176a6e59c2
Other sources
Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by a use-after-free flaw in the traffic control index filter (tcindex). By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to gain elevated privileges to root.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-1281?
CVE-2023-1281 is classified as a Privilege Escalation vulnerability in the Linux kernel.
How do I fix CVE-2023-1281?
To fix CVE-2023-1281, upgrade to Linux kernel version 6.2 or apply the relevant patches for affected versions.
Which versions of the Linux kernel are affected by CVE-2023-1281?
CVE-2023-1281 affects Linux kernel versions from 4.14 up to 6.1.13, as well as specific release candidates.
What systems are affected by CVE-2023-1281?
CVE-2023-1281 affects multiple systems including Red Hat's Kernel and IBM's Security Verify Governance, Identity Manager components.
What is a Use After Free vulnerability like CVE-2023-1281?
A Use After Free vulnerability occurs when a program continues to use memory after it has been freed, potentially leading to exploit opportunities.