F5-K000138731: Use After Free
A use-after-free vulnerability in the Linux kernel's net/sched: clsfw component can be exploited to achieve local privilege escalation. If tcfchangeindev() fails, fwsetparms() will immediately return an error after incrementing or decrementing the reference counter in tcfbindfilter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.
Affected Software
Event History
Frequently Asked Questions
What is the severity of F5-K000138731?
F5-K000138731 is considered a critical severity vulnerability due to its potential for local privilege escalation.
How do I fix F5-K000138731?
To mitigate F5-K000138731, upgrade to the patched version 5.2.0 or later of the F5 Traffix Systems Signaling Delivery Controller.
Which products are affected by F5-K000138731?
The vulnerability F5-K000138731 affects the F5 Traffix Systems Signaling Delivery Controller versions 5.1.0 and 5.2.0.
What is a use-after-free vulnerability in F5-K000138731?
A use-after-free vulnerability in F5-K000138731 occurs when the code incorrectly handles memory allocation, leading to potential exploitation.
Can F5-K000138731 be exploited remotely?
No, F5-K000138731 is a local privilege escalation vulnerability that requires local access to the system to exploit.