CVE-2023-32269: Use After Free
An issue was discovered in the Linux kernel before 6.1.11. In net/netrom/afnetrom.c, there is a use-after-free because accept is also allowed for a successfully connected AFNETROM socket. However, in order for an attacker to exploit this, the system must have netrom routing configured or the attacker must have the CAPNETADMIN capability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 6.1.11
Event History
Frequently Asked Questions
What is the severity of CVE-2023-32269?
CVE-2023-32269 has a medium severity due to the potential for a use-after-free vulnerability in the Linux kernel.
How do I fix CVE-2023-32269?
You can fix CVE-2023-32269 by upgrading to Linux kernel version 6.1.11 or later.
What are the affected versions for CVE-2023-32269?
CVE-2023-32269 affects Linux kernel versions prior to 6.1.11.
Who is affected by CVE-2023-32269?
Users who have netrom routing configured and are running vulnerable versions of the Linux kernel are at risk for CVE-2023-32269.
Is CVE-2023-32269 exploitable remotely?
CVE-2023-32269 can potentially be exploited remotely if the affected system is configured to use netrom routing.