UBUNTU-CVE-2023-4622: Use After Free

Q: Who is realistically exposed to exploitation?

Systems running one of the listed Ubuntu Linux kernel packages are exposed if they include the vulnerable af_unix code. Exploitation is local and requires an attacker to already have low-privileged access to the system.

Q: What level of access does an attacker need?

The attack vector is local, with low privileges required and no user interaction. Successful exploitation can result in high impact to confidentiality, integrity, and availability through local privilege escalation.

Q: What should be done to remediate this issue?

Upgrade to a kernel containing commit 790c2f9d15b594350ae9bca7b236f2b1859de02c or an equivalent backport. The affected package list includes standard Ubuntu kernels and the AWS, Azure, GCP, KVM, Oracle, FIPS, and AWS FIPS variants.

Published Sep 6, 2023

Updated

A use-after-free vulnerability in the Linux kernel's afunix component can be exploited to achieve local privilege escalation. The unixstreamsendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unixstreamsendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free. We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c (or backported equivalents).

Affected Software

151 affected componentsFixes available

ubuntu/linux-aws<4.4.0-1124.130

4.4.0-1124.130

ubuntu/linux-azure<4.15.0-1171.186~14.04.1

4.15.0-1171.186~14.04.1

ubuntu/linux-lts-xenial<4.4.0-246.280~14.04.1

4.4.0-246.280~14.04.1

ubuntu/linux<4.4.0-246.280

4.4.0-246.280

ubuntu/linux-aws<4.4.0-1162.177

4.4.0-1162.177

ubuntu/linux-aws-hwe<4.15.0-1162.175~16.04.1

4.15.0-1162.175~16.04.1

ubuntu/linux-azure<4.15.0-1171.186~16.04.1

4.15.0-1171.186~16.04.1

ubuntu/linux-gcp<4.15.0-1156.173~16.04.1

4.15.0-1156.173~16.04.1

ubuntu/linux-hwe<4.15.0-219.230~16.04.1

4.15.0-219.230~16.04.1

ubuntu/linux-kvm<4.4.0-1125.135

4.4.0-1125.135

ubuntu/linux-oracle<4.15.0-1125.136~16.04.1

4.15.0-1125.136~16.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-fips<4.4.0-1094.101

4.4.0-1094.101

ubuntu/linux-fips*

ubuntu/linux<4.15.0-219.230

4.15.0-219.230

ubuntu/linux-aws<4.15.0-1162.175

4.15.0-1162.175

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-aws-5.4<5.4.0-1112.121~18.04.2

5.4.0-1112.121~18.04.2

ubuntu/linux-azure*

ubuntu/linux-azure-4.15<4.15.0-1171.186

4.15.0-1171.186

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-5.4<5.4.0-1118.125~18.04.1

5.4.0-1118.125~18.04.1

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-4.15<4.15.0-1156.173

4.15.0-1156.173

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-5.4<5.4.0-1116.125~18.04.1

5.4.0-1116.125~18.04.1

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-5.4<5.4.0-165.182~18.04.1

5.4.0-165.182~18.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-ibm-5.4<5.4.0-1059.64~18.04.1

5.4.0-1059.64~18.04.1

ubuntu/linux-kvm<4.15.0-1146.151

4.15.0-1146.151

ubuntu/linux-oem*

ubuntu/linux-oracle<4.15.0-1125.136

4.15.0-1125.136

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-oracle-5.4<5.4.0-1111.120~18.04.1

5.4.0-1111.120~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1096.107~18.04.1

5.4.0-1096.107~18.04.1

ubuntu/linux-aws-fips<4.15.0-2101.107

4.15.0-2101.107

ubuntu/linux-azure-fips<4.15.0-2080.86

4.15.0-2080.86

ubuntu/linux-fips<4.15.0-1117.128

4.15.0-1117.128

ubuntu/linux-gcp-fips<4.15.0-2064.69

4.15.0-2064.69

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.4.0-165.182

5.4.0-165.182

ubuntu/linux-aws<5.4.0-1112.121

5.4.0-1112.121

ubuntu/linux-aws-5.15<5.15.0-1048.53~20.04.1

5.15.0-1048.53~20.04.1

ubuntu/linux-azure<5.4.0-1118.125

5.4.0-1118.125

ubuntu/linux-azure-5.15<5.15.0-1050.57~20.04.1

5.15.0-1050.57~20.04.1

ubuntu/linux-bluefield<5.4.0-1073.79

5.4.0-1073.79

ubuntu/linux-gcp<5.4.0-1116.125

5.4.0-1116.125

ubuntu/linux-gcp-5.15<5.15.0-1045.53~20.04.2

5.15.0-1045.53~20.04.2

ubuntu/linux-gkeop<5.4.0-1079.83

5.4.0-1079.83

ubuntu/linux-gkeop-5.15<5.15.0-1031.37~20.04.1

5.15.0-1031.37~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-87.97~20.04.1

5.15.0-87.97~20.04.1

ubuntu/linux-ibm<5.4.0-1059.64

5.4.0-1059.64

ubuntu/linux-ibm-5.15<5.15.0-1041.44~20.04.1

5.15.0-1041.44~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1043.49~20.04.1

5.15.0-1043.49~20.04.1

ubuntu/linux-iot<5.4.0-1024.25

5.4.0-1024.25

ubuntu/linux-kvm<5.4.0-1101.107

5.4.0-1101.107

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-87.96~20.04.1

5.15.0-87.96~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1019.19~20.04.1

5.15.0-1019.19~20.04.1

ubuntu/linux-oracle<5.4.0-1111.120

5.4.0-1111.120

ubuntu/linux-oracle-5.15<5.15.0-1046.52~20.04.1

5.15.0-1046.52~20.04.1

ubuntu/linux-raspi<5.4.0-1096.107

5.4.0-1096.107

ubuntu/linux-riscv-5.15<5.15.0-1044.48~20.04.1

5.15.0-1044.48~20.04.1

ubuntu/linux-xilinx-zynqmp<5.4.0-1032.36

5.4.0-1032.36

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-aws-fips<5.4.0-1112.121+fips1

5.4.0-1112.121+fips1

ubuntu/linux-azure-fips<5.4.0-1118.125+fips1

5.4.0-1118.125+fips1

ubuntu/linux-fips<5.4.0-1087.96

5.4.0-1087.96

ubuntu/linux-gcp-fips<5.4.0-1116.125+fips1

5.4.0-1116.125+fips1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.15.0-87.97

5.15.0-87.97

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1048.53

5.15.0-1048.53

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2<6.2.0-1014.14~22.04.1

6.2.0-1014.14~22.04.1

ubuntu/linux-azure<5.15.0-1050.57

5.15.0-1050.57

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2<6.2.0-1015.15~22.04.1

6.2.0-1015.15~22.04.1

ubuntu/linux-azure-fde<5.15.0-1050.57.1

5.15.0-1050.57.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2<6.2.0-1015.15~22.04.1.1

6.2.0-1015.15~22.04.1.1

ubuntu/linux-gcp<5.15.0-1045.53

5.15.0-1045.53

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2<6.2.0-1017.19~22.04.1

6.2.0-1017.19~22.04.1

ubuntu/linux-gke<5.15.0-1045.50

5.15.0-1045.50

ubuntu/linux-gkeop<5.15.0-1031.37

5.15.0-1031.37

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2<6.2.0-35.35~22.04.1

6.2.0-35.35~22.04.1

ubuntu/linux-ibm<5.15.0-1041.44

5.15.0-1041.44

ubuntu/linux-intel-iotg<5.15.0-1043.49

5.15.0-1043.49

ubuntu/linux-kvm<5.15.0-1045.50

5.15.0-1045.50

ubuntu/linux-lowlatency<5.15.0-87.96

5.15.0-87.96

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2<6.2.0-1015.15~22.04.1

6.2.0-1015.15~22.04.1

ubuntu/linux-nvidia<5.15.0-1039.39

5.15.0-1039.39

ubuntu/linux-nvidia-6.2<6.2.0-1011.11

6.2.0-1011.11

ubuntu/linux-nvidia-tegra<5.15.0-1019.19

5.15.0-1019.19

ubuntu/linux-nvidia-tegra-igx<5.15.0-1006.6

5.15.0-1006.6

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1<6.1.0-1023.23

6.1.0-1023.23

ubuntu/linux-oracle<5.15.0-1046.52

5.15.0-1046.52

ubuntu/linux-raspi<5.15.0-1041.44

5.15.0-1041.44

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2<6.2.0-1007.8~22.04.1

6.2.0-1007.8~22.04.1

ubuntu/linux-xilinx-zynqmp<5.15.0-1025.29

5.15.0-1025.29

ubuntu/linux-bluefield<5.15.0-1028.30

5.15.0-1028.30

ubuntu/linux-intel-iot-realtime<5.15.0-1041.43

5.15.0-1041.43

ubuntu/linux-realtime<5.15.0-1049.55

5.15.0-1049.55

ubuntu/linux-fips*

ubuntu/linux-raspi-realtime*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1124.130
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1171.186~14.04.1
Upgrade
Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.
Fixed in 4.4.0-246.280~14.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.4.0-246.280
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1162.177
Upgrade
Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-1162.175~16.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1171.186~16.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.15.0-1156.173~16.04.1
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-219.230~16.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.4.0-1125.135
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1125.136~16.04.1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.4.0-1094.101
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.15.0-219.230
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.15.0-1162.175
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1112.121~18.04.2
Upgrade
Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1171.186
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1118.125~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1156.173
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1116.125~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-165.182~18.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1059.64~18.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.15.0-1146.151
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1125.136
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1111.120~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1096.107~18.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2101.107
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2080.86
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-1117.128
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2064.69
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-165.182
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1112.121
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1048.53~20.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1118.125
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.57~20.04.1
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1073.79
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1116.125
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1045.53~20.04.2
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.4.0-1079.83
Upgrade
Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1031.37~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-87.97~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1059.64
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1041.44~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1043.49~20.04.1
Upgrade
Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.
Fixed in 5.4.0-1024.25
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1101.107
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-87.96~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1019.19~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1111.120
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1046.52~20.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1096.107
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1044.48~20.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.4.0-1032.36
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1112.121+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1118.125+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1087.96
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1116.125+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-87.97
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1048.53
Upgrade
Upgrade ubuntu/linux-aws-6.2 to a version that resolves this vulnerability.
Fixed in 6.2.0-1014.14~22.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.57
Upgrade
Upgrade ubuntu/linux-azure-6.2 to a version that resolves this vulnerability.
Fixed in 6.2.0-1015.15~22.04.1
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.57.1
Upgrade
Upgrade ubuntu/linux-azure-fde-6.2 to a version that resolves this vulnerability.
Fixed in 6.2.0-1015.15~22.04.1.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1045.53
Upgrade
Upgrade ubuntu/linux-gcp-6.2 to a version that resolves this vulnerability.
Fixed in 6.2.0-1017.19~22.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1045.50
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1031.37
Upgrade
Upgrade ubuntu/linux-hwe-6.2 to a version that resolves this vulnerability.
Fixed in 6.2.0-35.35~22.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1041.44
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1043.49
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1045.50
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-87.96
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.2 to a version that resolves this vulnerability.
Fixed in 6.2.0-1015.15~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1039.39
Upgrade
Upgrade ubuntu/linux-nvidia-6.2 to a version that resolves this vulnerability.
Fixed in 6.2.0-1011.11
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1019.19
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1006.6
Upgrade
Upgrade ubuntu/linux-oem-6.1 to a version that resolves this vulnerability.
Fixed in 6.1.0-1023.23
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1046.52
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1041.44
Upgrade
Upgrade ubuntu/linux-starfive-6.2 to a version that resolves this vulnerability.
Fixed in 6.2.0-1007.8~22.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1025.29
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1028.30
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1041.43
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1049.55
Upgrade
Upgrade Linux kernel af_unix to a version that resolves this vulnerability.
Patch 790c2f9d15b594350ae9bca7b236f2b1859de02c

Event History

Sep 6, 2023

CVE Published

via OSV·02:15 PM

Data Sourced

via OSV·02:15 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who is realistically exposed to exploitation?

Systems running one of the listed Ubuntu Linux kernel packages are exposed if they include the vulnerable af_unix code. Exploitation is local and requires an attacker to already have low-privileged access to the system.

What level of access does an attacker need?

The attack vector is local, with low privileges required and no user interaction. Successful exploitation can result in high impact to confidentiality, integrity, and availability through local privilege escalation.

What should be done to remediate this issue?

Upgrade to a kernel containing commit 790c2f9d15b594350ae9bca7b236f2b1859de02c or an equivalent backport. The affected package list includes standard Ubuntu kernels and the AWS, Azure, GCP, KVM, Oracle, FIPS, and AWS FIPS variants.

UBUNTU-CVE-2023-4622: Use After Free

Affected Software

Remediation

Event History

Frequently Asked Questions

Who is realistically exposed to exploitation?

What level of access does an attacker need?

What should be done to remediate this issue?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to exploitation?

What level of access does an attacker need?

What should be done to remediate this issue?