F5-K000138731: Use After Free
First published: Tue Feb 27 2024(Updated: )
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| F5 Traffix Systems Signaling Delivery Controller | =5.2.0=5.1.0 | 5.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of F5-K000138731?
F5-K000138731 is considered a critical severity vulnerability due to its potential for local privilege escalation.
How do I fix F5-K000138731?
To mitigate F5-K000138731, upgrade to the patched version 5.2.0 or later of the F5 Traffix Systems Signaling Delivery Controller.
Which products are affected by F5-K000138731?
The vulnerability F5-K000138731 affects the F5 Traffix Systems Signaling Delivery Controller versions 5.1.0 and 5.2.0.
What is a use-after-free vulnerability in F5-K000138731?
A use-after-free vulnerability in F5-K000138731 occurs when the code incorrectly handles memory allocation, leading to potential exploitation.
Can F5-K000138731 be exploited remotely?
No, F5-K000138731 is a local privilege escalation vulnerability that requires local access to the system to exploit.
- agent/references
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/type
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/event
- agent/source
- agent/tags
- collector/f5-advisory
- source/F5
- alias/CVE-2023-3776
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/f5
- canonical/f5 traffix systems signaling delivery controller
- version/f5 traffix systems signaling delivery controller/5.2.0
- version/f5 traffix systems signaling delivery controller/5.1.0