CVE-2023-1829: (Pwn2Own) Canonical Ubuntu tcindex Double-Free Local Privilege Escalation Vulnerability

Published Apr 12, 2023
·
Updated

A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindexdelete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root. We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/ .

Other sources

A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindexdelete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root. We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28.

References:

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8c710f75256bb3cf05ac7b1672c82b92c43f3d28 https://kernel.dance/#8c710f75256bb3cf05ac7b1672c82b92c43f3d28

— Red Hat

Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by a use-after-free flaw when deleting a perfect hash filter in the tcindexdelete() function. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to gain elevated privileges.

— IBM

This vulnerability allows local attackers to escalate privileges on affected installations of Canonical Ubuntu. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the tcindex module. The issue results from the lack of validating the existence of an object prior to performing further free operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the kernel.

— ZDI

Affected Software

146 affected componentsFixes available
Linux Linux kernel<4.14.308
Linux Linux kernel>=4.15<4.19.276
Linux Linux kernel>=4.20<5.4.235
Linux Linux kernel>=5.5<5.10.173
Linux Linux kernel>=5.11<5.15.100
Linux Linux kernel>=5.16<6.1.18
Linux Linux kernel>=6.2<6.2.5
IBM Security Verify Governance, Identity Manager software component<=ISVG 10.0.2
IBM Security Verify Governance, Identity Manager virtual appliance component<=ISVG 10.0.2
ubuntu/linux-aws<4.4.0-1118.124
4.4.0-1118.124
ubuntu/linux-azure<4.15.0-1164.179~14.04.1
4.15.0-1164.179~14.04.1
ubuntu/linux-lts-xenial<4.4.0-240.274~14.04.1
4.4.0-240.274~14.04.1
ubuntu/linux*
ubuntu/linux<4.4.0-240.274
4.4.0-240.274
ubuntu/linux-aws<4.4.0-1156.171
4.4.0-1156.171
ubuntu/linux-aws-hwe<4.15.0-1155.168~16.04.1
4.15.0-1155.168~16.04.1
ubuntu/linux-azure<4.15.0-1164.179~16.04.1
4.15.0-1164.179~16.04.1
ubuntu/linux-gcp<4.15.0-1149.165~16.04.1
4.15.0-1149.165~16.04.1
ubuntu/linux-hwe<4.15.0-210.221~16.04.1
4.15.0-210.221~16.04.1
ubuntu/linux-kvm<4.4.0-1119.129
4.4.0-1119.129
ubuntu/linux-oracle<4.15.0-1118.129~16.04.1
4.15.0-1118.129~16.04.1
ubuntu/linux-hwe-edge*
ubuntu/linux-fips<4.4.0-1088.95
4.4.0-1088.95
ubuntu/linux-fips*
ubuntu/linux<4.15.0-210.221
4.15.0-210.221
ubuntu/linux-aws<4.15.0-1155.168
4.15.0-1155.168
ubuntu/linux-aws-5.4<5.4.0-1101.109~18.04.1
5.4.0-1101.109~18.04.1
ubuntu/linux-azure-4.15<4.15.0-1164.179
4.15.0-1164.179
ubuntu/linux-azure-5.4<5.4.0-1107.113~18.04.1
5.4.0-1107.113~18.04.1
ubuntu/linux-gcp-4.15<4.15.0-1149.165
4.15.0-1149.165
ubuntu/linux-gcp-5.4<5.4.0-1104.113~18.04.1
5.4.0-1104.113~18.04.1
ubuntu/linux-hwe-5.4<5.4.0-148.165~18.04.1
5.4.0-148.165~18.04.1
ubuntu/linux-ibm-5.4<5.4.0-1048.53~18.04.1
5.4.0-1048.53~18.04.1
ubuntu/linux-kvm<4.15.0-1139.144
4.15.0-1139.144
ubuntu/linux-oracle<4.15.0-1118.129
4.15.0-1118.129
ubuntu/linux-oracle-5.4<5.4.0-1100.109~18.04.1
5.4.0-1100.109~18.04.1
ubuntu/linux-raspi-5.4<5.4.0-1084.95~18.04.1
5.4.0-1084.95~18.04.1
ubuntu/linux-raspi2<4.15.0-1131.139
4.15.0-1131.139
ubuntu/linux-snapdragon<4.15.0-1149.159
4.15.0-1149.159
ubuntu/linux-aws-5.0*
ubuntu/linux-aws-5.3*
ubuntu/linux-azure*
ubuntu/linux-azure-5.3*
ubuntu/linux-azure-edge*
ubuntu/linux-gcp*
ubuntu/linux-gcp-5.3*
ubuntu/linux-gke-4.15*
ubuntu/linux-gke-5.4*
ubuntu/linux-gkeop-5.4*
ubuntu/linux-hwe*
ubuntu/linux-hwe-edge*
ubuntu/linux-oem*
ubuntu/linux-oracle-5.0*
ubuntu/linux-oracle-5.3*
ubuntu/linux-aws-fips<4.15.0-2094.100
4.15.0-2094.100
ubuntu/linux-azure-fips<4.15.0-2073.79
4.15.0-2073.79
ubuntu/linux-fips<4.15.0-1110.121
4.15.0-1110.121
ubuntu/linux-gcp-fips<4.15.0-2057.62
4.15.0-2057.62
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux<5.4.0-148.165
5.4.0-148.165
ubuntu/linux-aws<5.4.0-1101.109
5.4.0-1101.109
ubuntu/linux-aws-5.15<5.15.0-1035.39~20.04.1
5.15.0-1035.39~20.04.1
ubuntu/linux-azure<5.4.0-1107.113
5.4.0-1107.113
ubuntu/linux-azure-5.15<5.15.0-1037.44~20.04.1
5.15.0-1037.44~20.04.1
ubuntu/linux-bluefield<5.4.0-1062.68
5.4.0-1062.68
ubuntu/linux-gcp<5.4.0-1104.113
5.4.0-1104.113
ubuntu/linux-gcp-5.15<5.15.0-1033.41~20.04.1
5.15.0-1033.41~20.04.1
ubuntu/linux-gke<5.4.0-1098.105
5.4.0-1098.105
ubuntu/linux-gke-5.15<5.15.0-1032.37~20.04.1
5.15.0-1032.37~20.04.1
ubuntu/linux-gkeop<5.4.0-1068.72
5.4.0-1068.72
ubuntu/linux-gkeop-5.15<5.15.0-1019.24~20.04.1
5.15.0-1019.24~20.04.1
ubuntu/linux-hwe-5.15<5.15.0-71.78~20.04.1
5.15.0-71.78~20.04.1
ubuntu/linux-ibm<5.4.0-1048.53
5.4.0-1048.53
ubuntu/linux-intel-iotg-5.15<5.15.0-1030.35~20.04.1
5.15.0-1030.35~20.04.1
ubuntu/linux-iot<5.4.0-1017.18
5.4.0-1017.18
ubuntu/linux-kvm<5.4.0-1090.96
5.4.0-1090.96
ubuntu/linux-lowlatency-hwe-5.15<5.15.0-71.78~20.04.1
5.15.0-71.78~20.04.1
ubuntu/linux-nvidia-tegra-5.15<5.15.0-1014.14~20.04.1
5.15.0-1014.14~20.04.1
ubuntu/linux-oracle<5.4.0-1100.109
5.4.0-1100.109
ubuntu/linux-oracle-5.15<5.15.0-1034.40~20.04.1
5.15.0-1034.40~20.04.1
ubuntu/linux-raspi<5.4.0-1084.95
5.4.0-1084.95
ubuntu/linux-riscv-5.15<5.15.0-1032.36~20.04.1
5.15.0-1032.36~20.04.1
ubuntu/linux-xilinx-zynqmp<5.4.0-1024.28
5.4.0-1024.28
ubuntu/linux-aws-5.11*
ubuntu/linux-aws-5.13*
ubuntu/linux-aws-5.8*
ubuntu/linux-azure-5.11*
ubuntu/linux-azure-5.13*
ubuntu/linux-azure-5.8*
ubuntu/linux-gcp-5.11*
ubuntu/linux-gcp-5.13*
ubuntu/linux-gcp-5.8*
ubuntu/linux-hwe-5.11*
ubuntu/linux-hwe-5.13*
ubuntu/linux-hwe-5.8*
ubuntu/linux-intel-5.13*
ubuntu/linux-oem-5.10*
ubuntu/linux-oem-5.13*
ubuntu/linux-oem-5.6*
ubuntu/linux-oracle-5.11*
ubuntu/linux-oracle-5.13*
ubuntu/linux-oracle-5.8*
ubuntu/linux-raspi2*
ubuntu/linux-riscv*
ubuntu/linux-riscv-5.11*
ubuntu/linux-riscv-5.8*
ubuntu/linux-aws-fips<5.4.0-1101.109+fips1
5.4.0-1101.109+fips1
ubuntu/linux-azure-fips<5.4.0-1107.113+fips1
5.4.0-1107.113+fips1
ubuntu/linux-fips<5.4.0-1076.85
5.4.0-1076.85
ubuntu/linux-gcp-fips<5.4.0-1104.113+fips1
5.4.0-1104.113+fips1
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux<5.15.0-71.78
5.15.0-71.78
ubuntu/linux-aws<5.15.0-1035.39
5.15.0-1035.39
ubuntu/linux-azure<5.15.0-1037.44
5.15.0-1037.44
ubuntu/linux-azure-5.19*
ubuntu/linux-azure-fde<5.15.0-1037.44.1
5.15.0-1037.44.1
ubuntu/linux-azure-fde-5.19*
ubuntu/linux-gcp<5.15.0-1034.42
5.15.0-1034.42
ubuntu/linux-gke<5.15.0-1032.37
5.15.0-1032.37
ubuntu/linux-gkeop<5.15.0-1019.24
5.15.0-1019.24
ubuntu/linux-hwe-5.19<5.19.0-41.42~22.04.1
5.19.0-41.42~22.04.1
ubuntu/linux-ibm<5.15.0-1029.32
5.15.0-1029.32
ubuntu/linux-intel-iotg<5.15.0-1030.35
5.15.0-1030.35
ubuntu/linux-kvm<5.15.0-1032.37
5.15.0-1032.37
ubuntu/linux-lowlatency<5.15.0-71.78
5.15.0-71.78
ubuntu/linux-lowlatency-hwe-5.19*
ubuntu/linux-nvidia<5.15.0-1023.23
5.15.0-1023.23
ubuntu/linux-oem-5.17<5.17.0-1031.32
5.17.0-1031.32
ubuntu/linux-oem-6.0<6.0.0-1015.15
6.0.0-1015.15
ubuntu/linux-oem-6.1<6.1.0-1009.9
6.1.0-1009.9
ubuntu/linux-oracle<5.15.0-1034.40
5.15.0-1034.40
ubuntu/linux-raspi<5.15.0-1028.30
5.15.0-1028.30
ubuntu/linux-realtime*
ubuntu/linux-riscv*
ubuntu/linux-bluefield<5.15.0-1017.19
5.15.0-1017.19
ubuntu/linux-intel-iot-realtime<5.15.0-1028.33
5.15.0-1028.33
ubuntu/linux-realtime<5.15.0-1037.40
5.15.0-1037.40
ubuntu/linux-raspi-realtime*
debian/linux
6.1.176-16.1.190-16.12.107-16.12.113-17.2.12-17.2.13-1
Canonical Ubuntu

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.4.0-1118.124
  2. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 4.15.0-1164.179~14.04.1
  3. Upgrade

    Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.

    Fixed in 4.4.0-240.274~14.04.1
  4. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 4.4.0-240.274
  5. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.4.0-1156.171
  6. Upgrade

    Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.

    Fixed in 4.15.0-1155.168~16.04.1
  7. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 4.15.0-1164.179~16.04.1
  8. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 4.15.0-1149.165~16.04.1
  9. Upgrade

    Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.

    Fixed in 4.15.0-210.221~16.04.1
  10. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 4.4.0-1119.129
  11. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 4.15.0-1118.129~16.04.1
  12. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 4.4.0-1088.95
  13. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 4.15.0-210.221
  14. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.15.0-1155.168
  15. Upgrade

    Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1101.109~18.04.1
  16. Upgrade

    Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1164.179
  17. Upgrade

    Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1107.113~18.04.1
  18. Upgrade

    Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1149.165
  19. Upgrade

    Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1104.113~18.04.1
  20. Upgrade

    Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-148.165~18.04.1
  21. Upgrade

    Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1048.53~18.04.1
  22. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 4.15.0-1139.144
  23. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 4.15.0-1118.129
  24. Upgrade

    Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1100.109~18.04.1
  25. Upgrade

    Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1084.95~18.04.1
  26. Upgrade

    Upgrade ubuntu/linux-raspi2 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1131.139
  27. Upgrade

    Upgrade ubuntu/linux-snapdragon to a version that resolves this vulnerability.

    Fixed in 4.15.0-1149.159
  28. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2094.100
  29. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2073.79
  30. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-1110.121
  31. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2057.62
  32. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 5.4.0-148.165
  33. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 5.4.0-1101.109
  34. Upgrade

    Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1035.39~20.04.1
  35. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 5.4.0-1107.113
  36. Upgrade

    Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1037.44~20.04.1
  37. Upgrade

    Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

    Fixed in 5.4.0-1062.68
  38. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 5.4.0-1104.113
  39. Upgrade

    Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1033.41~20.04.1
  40. Upgrade

    Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.

    Fixed in 5.4.0-1098.105
  41. Upgrade

    Upgrade ubuntu/linux-gke-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1032.37~20.04.1
  42. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 5.4.0-1068.72
  43. Upgrade

    Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1019.24~20.04.1
  44. Upgrade

    Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-71.78~20.04.1
  45. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 5.4.0-1048.53
  46. Upgrade

    Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1030.35~20.04.1
  47. Upgrade

    Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.

    Fixed in 5.4.0-1017.18
  48. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 5.4.0-1090.96
  49. Upgrade

    Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-71.78~20.04.1
  50. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1014.14~20.04.1
  51. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 5.4.0-1100.109
  52. Upgrade

    Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1034.40~20.04.1
  53. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 5.4.0-1084.95
  54. Upgrade

    Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1032.36~20.04.1
  55. Upgrade

    Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.

    Fixed in 5.4.0-1024.28
  56. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1101.109+fips1
  57. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1107.113+fips1
  58. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1076.85
  59. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1104.113+fips1
  60. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 5.15.0-71.78
  61. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 5.15.0-1035.39
  62. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 5.15.0-1037.44
  63. Upgrade

    Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.

    Fixed in 5.15.0-1037.44.1
  64. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 5.15.0-1034.42
  65. Upgrade

    Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.

    Fixed in 5.15.0-1032.37
  66. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 5.15.0-1019.24
  67. Upgrade

    Upgrade ubuntu/linux-hwe-5.19 to a version that resolves this vulnerability.

    Fixed in 5.19.0-41.42~22.04.1
  68. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1029.32
  69. Upgrade

    Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.

    Fixed in 5.15.0-1030.35
  70. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1032.37
  71. Upgrade

    Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.

    Fixed in 5.15.0-71.78
  72. Upgrade

    Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.

    Fixed in 5.15.0-1023.23
  73. Upgrade

    Upgrade ubuntu/linux-oem-5.17 to a version that resolves this vulnerability.

    Fixed in 5.17.0-1031.32
  74. Upgrade

    Upgrade ubuntu/linux-oem-6.0 to a version that resolves this vulnerability.

    Fixed in 6.0.0-1015.15
  75. Upgrade

    Upgrade ubuntu/linux-oem-6.1 to a version that resolves this vulnerability.

    Fixed in 6.1.0-1009.9
  76. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 5.15.0-1034.40
  77. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 5.15.0-1028.30
  78. Upgrade

    Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

    Fixed in 5.15.0-1017.19
  79. Upgrade

    Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.

    Fixed in 5.15.0-1028.33
  80. Upgrade

    Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.

    Fixed in 5.15.0-1037.40
  81. Upgrade

    Upgrade debian/linux to a version that resolves this vulnerability.

    Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
  82. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch 8c710f75256bb3cf05ac7b1672c82b92c43f3d28
  83. Configuration

    Blacklist cls_tcindex to block autoloading the module by adding the blacklist entry to /etc/modprobe.d/blacklist-tcindex.conf.

    Linux Kernel tcindex module module blacklist = cls_tcindex

Event History

Apr 12, 2023
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Data Sourced
via Ubuntu·12:00 AM
RemedyDescriptionSeverityAffected Software
CVE Published
via MITRE·11:16 AM
Data Sourced
via MITRE·11:16 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Apr 20, 2023
Data Sourced
via Red Hat·08:55 PM
DescriptionSeverityAffected Software
Jun 15, 2023
Exploit Published
via GitHub·03:27 AM
Jul 6, 2023
Advisory Published
via ZDI·12:00 AM
Data Sourced
via ZDI·12:00 AM
DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

1

What is the severity of CVE-2023-1829?

CVE-2023-1829 is considered a high-severity vulnerability that can lead to local privilege escalation in affected systems.

2

How do I fix CVE-2023-1829?

To remediate CVE-2023-1829, update your Linux kernel or IBM Security Verify Governance, Identity Manager components to the patched versions provided by the vendor.

3

Which Linux kernel versions are affected by CVE-2023-1829?

CVE-2023-1829 affects Linux kernel versions prior to 4.14.308 and versions between 4.15 and up to 6.2.5.

4

What products are affected by CVE-2023-1829?

CVE-2023-1829 impacts IBM Security Verify Governance components and multiple versions of the Linux kernel.

5

Can CVE-2023-1829 be exploited remotely?

CVE-2023-1829 is a local privilege escalation vulnerability, which means it requires local access to the affected system for exploitation.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203