CVE-2023-6932: Fixes in Linux Kernel
A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation.
A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread.
We recommend upgrading past commit e2b706c691905fe78468c361aaabc719d0a496f1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch e2b706c691905fe78468c361aaabc719d0a496f1 - Configuration
Disable unprivileged users' ability to create namespaces by setting kernel.unprivileged_userns_clone=0; apply with sysctl -w and persist in /etc/sysctl.d/99-disable-unpriv-userns.conf.
Linux kernel kernel.unprivileged_userns_clone = 0
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2023-6932?
CVE-2023-6932 is considered to have a high severity due to its potential for local privilege escalation.
How do I fix CVE-2023-6932?
To fix CVE-2023-6932, users should update their Linux kernel to a version that is not vulnerable, such as 5.10.223-1, 5.10.226-1, or later versions.
Which Linux kernel versions are affected by CVE-2023-6932?
CVE-2023-6932 affects Linux kernel versions from 2.6.12 up to, but not including, 6.7.
Is IBM QRadar SIEM affected by CVE-2023-6932?
Yes, IBM QRadar SIEM versions up to 7.5.0 UP8 IF01 are affected by CVE-2023-6932.
What type of vulnerability is CVE-2023-6932?
CVE-2023-6932 is a use-after-free vulnerability found in the Linux kernel's ipv4: igmp component.