Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2023-4206: Linux kernel cls_route allows local privilege escalation
CVE-2023-4206 · published 3 years ago
Summary
The cls_route part of the Linux kernel can be tricked into freeing memory it still needs, letting a local user gain higher system rights. This affects Ubuntu-based distributions such as Linux, Linux AWS, Linux Azure, Linux LTS Xenial, and Linux AWS HWE. Apply the recommended kernel update that includes the fix after commit b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8.
What to do
- Update canonical linux-aws to version 4.4.0-1123.129.
- Update canonical linux-azure to version 4.15.0-1170.185~14.04.1.
- Update canonical linux-lts-xenial to version 4.4.0-245.279~14.04.1.
- Update canonical linux to version 4.4.0-245.279.
- Update canonical linux-aws to version 4.4.0-1161.176.
- Update canonical linux-aws-hwe to version 4.15.0-1161.174~16.04.1.
- Update canonical linux-azure to version 4.15.0-1170.185~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1155.172~16.04.1.
- Update canonical linux-hwe to version 4.15.0-218.229~16.04.1.
- Update canonical linux-kvm to version 4.4.0-1124.134.
- Update canonical linux-oracle to version 4.15.0-1124.135~16.04.1.
- Update canonical linux-fips to version 4.4.0-1093.100.
- Update canonical linux to version 4.15.0-218.229.
- Update canonical linux-aws to version 4.15.0-1161.174.
- Update canonical linux-aws-5.4 to version 5.4.0-1110.119~18.04.1.
- Update canonical linux-azure-4.15 to version 4.15.0-1170.185.
- Update canonical linux-azure-5.4 to version 5.4.0-1116.123~18.04.1.
- Update canonical linux-gcp-4.15 to version 4.15.0-1155.172.
- Update canonical linux-gcp-5.4 to version 5.4.0-1113.122~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-163.180~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1057.62~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1145.150.
- Update canonical linux-oracle to version 4.15.0-1124.135.
- Update canonical linux-oracle-5.4 to version 5.4.0-1109.118~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1094.105~18.04.1.
- Update canonical linux-aws-fips to version 4.15.0-2100.106.
- Update canonical linux-azure-fips to version 4.15.0-2079.85.
- Update canonical linux-fips to version 4.15.0-1116.127.
- Update canonical linux-gcp-fips to version 4.15.0-2063.68.
- Update canonical linux to version 5.4.0-163.180.
- Update canonical linux-aws to version 5.4.0-1110.119.
- Update canonical linux-aws-5.15 to version 5.15.0-1045.50~20.04.1.
- Update canonical linux-azure to version 5.4.0-1116.123.
- Update canonical linux-azure-5.15 to version 5.15.0-1047.54~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1071.77.
- Update canonical linux-gcp to version 5.4.0-1113.122.
- Update canonical linux-gcp-5.15 to version 5.15.0-1042.50~20.04.1.
- Update canonical linux-gkeop to version 5.4.0-1077.81.
- Update canonical linux-gkeop-5.15 to version 5.15.0-1028.33~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-84.93~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1057.62.
- Update canonical linux-ibm-5.15 to version 5.15.0-1038.41~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1040.46~20.04.1.
- Update canonical linux-iot to version 5.4.0-1022.23.
- Update canonical linux-kvm to version 5.4.0-1099.105.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-84.93~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1018.18~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1109.118.
- Update canonical linux-oracle-5.15 to version 5.15.0-1044.50~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1094.105.
- Update canonical linux-riscv-5.15 to version 5.15.0-1041.45~20.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.4.0-1030.34.
- Update canonical linux-aws-fips to version 5.4.0-1110.119+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1116.123+fips1.
- Update canonical linux-fips to version 5.4.0-1085.94.
- Update canonical linux-gcp-fips to version 5.4.0-1113.122+fips1.
- Update canonical linux to version 5.15.0-84.93.
- Update canonical linux-aws to version 5.15.0-1045.50.
- Update canonical linux-aws-6.2 to version 6.2.0-1012.12~22.04.1.
- Update canonical linux-azure to version 5.15.0-1047.54.
- Update canonical linux-azure-6.2 to version 6.2.0-1012.12~22.04.1.
- Update canonical linux-azure-fde to version 5.15.0-1047.54.1.
- Update canonical linux-gcp to version 5.15.0-1042.50.
- Update canonical linux-gcp-6.2 to version 6.2.0-1014.14~22.04.1.
- Update canonical linux-gke to version 5.15.0-1042.47.
- Update canonical linux-gkeop to version 5.15.0-1028.33.
- Update canonical linux-hwe-6.2 to version 6.2.0-33.33~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1038.41.
- Update canonical linux-intel-iotg to version 5.15.0-1040.46.
- Update canonical linux-kvm to version 5.15.0-1042.47.
- Update canonical linux-lowlatency to version 5.15.0-84.93.
- Update canonical linux-lowlatency-hwe-6.2 to version 6.2.0-1013.13~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1033.33.
- Update canonical linux-nvidia-tegra to version 5.15.0-1018.18.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1005.5.
- Update canonical linux-oem-6.1 to version 6.1.0-1021.21.
- Update canonical linux-oracle to version 5.15.0-1044.50.
- Update canonical linux-raspi to version 5.15.0-1038.41.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1025.29.
- Update canonical linux-bluefield to version 5.15.0-1024.26.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1039.41.
- Update canonical linux-realtime to version 5.15.0-1046.52.
- Update debian linux to version 6.1.52-1.
- Update debian linux to version 6.4.11-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws |
< 4.4.0-1123.129 Fix: upgrade to 4.4.0-1123.129
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1170.185~14.04.1 Fix: upgrade to 4.15.0-1170.185~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial |
< 4.4.0-245.279~14.04.1 Fix: upgrade to 4.4.0-245.279~14.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux |
< 4.4.0-245.279 Fix: upgrade to 4.4.0-245.279
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws |
< 4.4.0-1161.176 Fix: upgrade to 4.4.0-1161.176
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1161.174~16.04.1 Fix: upgrade to 4.15.0-1161.174~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure |
< 4.15.0-1170.185~16.04.1 Fix: upgrade to 4.15.0-1170.185~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1155.172~16.04.1 Fix: upgrade to 4.15.0-1155.172~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe |
< 4.15.0-218.229~16.04.1 Fix: upgrade to 4.15.0-218.229~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm |
< 4.4.0-1124.134 Fix: upgrade to 4.4.0-1124.134
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1124.135~16.04.1 Fix: upgrade to 4.15.0-1124.135~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips |
< 4.4.0-1093.100 Fix: upgrade to 4.4.0-1093.100
|
| Ubuntu:Pro:18.04:LTS | canonical | linux |
< 4.15.0-218.229 Fix: upgrade to 4.15.0-218.229
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws |
< 4.15.0-1161.174 Fix: upgrade to 4.15.0-1161.174
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1110.119~18.04.1 Fix: upgrade to 5.4.0-1110.119~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1170.185 Fix: upgrade to 4.15.0-1170.185
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1116.123~18.04.1 Fix: upgrade to 5.4.0-1116.123~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1155.172 Fix: upgrade to 4.15.0-1155.172
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1113.122~18.04.1 Fix: upgrade to 5.4.0-1113.122~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-163.180~18.04.1 Fix: upgrade to 5.4.0-163.180~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1057.62~18.04.1 Fix: upgrade to 5.4.0-1057.62~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1145.150 Fix: upgrade to 4.15.0-1145.150
|
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1124.135 Fix: upgrade to 4.15.0-1124.135
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1109.118~18.04.1 Fix: upgrade to 5.4.0-1109.118~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1094.105~18.04.1 Fix: upgrade to 5.4.0-1094.105~18.04.1
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2100.106 Fix: upgrade to 4.15.0-2100.106
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2079.85 Fix: upgrade to 4.15.0-2079.85
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1116.127 Fix: upgrade to 4.15.0-1116.127
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips |
< 4.15.0-2063.68 Fix: upgrade to 4.15.0-2063.68
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-163.180 Fix: upgrade to 5.4.0-163.180
|
Showing 50 of 153. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1110.119 Fix: upgrade to 5.4.0-1110.119
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1045.50~20.04.1 Fix: upgrade to 5.15.0-1045.50~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1116.123 Fix: upgrade to 5.4.0-1116.123
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1047.54~20.04.1 Fix: upgrade to 5.15.0-1047.54~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1071.77 Fix: upgrade to 5.4.0-1071.77
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1113.122 Fix: upgrade to 5.4.0-1113.122
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1042.50~20.04.1 Fix: upgrade to 5.15.0-1042.50~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop |
< 5.4.0-1077.81 Fix: upgrade to 5.4.0-1077.81
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 |
< 5.15.0-1028.33~20.04.1 Fix: upgrade to 5.15.0-1028.33~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-84.93~20.04.1 Fix: upgrade to 5.15.0-84.93~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1057.62 Fix: upgrade to 5.4.0-1057.62
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1038.41~20.04.1 Fix: upgrade to 5.15.0-1038.41~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1040.46~20.04.1 Fix: upgrade to 5.15.0-1040.46~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1022.23 Fix: upgrade to 5.4.0-1022.23
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1099.105 Fix: upgrade to 5.4.0-1099.105
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-84.93~20.04.1 Fix: upgrade to 5.15.0-84.93~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1018.18~20.04.1 Fix: upgrade to 5.15.0-1018.18~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1109.118 Fix: upgrade to 5.4.0-1109.118
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1044.50~20.04.1 Fix: upgrade to 5.15.0-1044.50~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1094.105 Fix: upgrade to 5.4.0-1094.105
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1041.45~20.04.1 Fix: upgrade to 5.15.0-1041.45~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.4.0-1030.34 Fix: upgrade to 5.4.0-1030.34
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1110.119+fips1 Fix: upgrade to 5.4.0-1110.119+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1116.123+fips1 Fix: upgrade to 5.4.0-1116.123+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1085.94 Fix: upgrade to 5.4.0-1085.94
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1113.122+fips1 Fix: upgrade to 5.4.0-1113.122+fips1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-84.93 Fix: upgrade to 5.15.0-84.93
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1045.50 Fix: upgrade to 5.15.0-1045.50
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 |
< 6.2.0-1012.12~22.04.1 Fix: upgrade to 6.2.0-1012.12~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1047.54 Fix: upgrade to 5.15.0-1047.54
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 |
< 6.2.0-1012.12~22.04.1 Fix: upgrade to 6.2.0-1012.12~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1047.54.1 Fix: upgrade to 5.15.0-1047.54.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1042.50 Fix: upgrade to 5.15.0-1042.50
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 |
< 6.2.0-1014.14~22.04.1 Fix: upgrade to 6.2.0-1014.14~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1042.47 Fix: upgrade to 5.15.0-1042.47
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1028.33 Fix: upgrade to 5.15.0-1028.33
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 |
< 6.2.0-33.33~22.04.1 Fix: upgrade to 6.2.0-33.33~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1038.41 Fix: upgrade to 5.15.0-1038.41
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1040.46 Fix: upgrade to 5.15.0-1040.46
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1042.47 Fix: upgrade to 5.15.0-1042.47
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-84.93 Fix: upgrade to 5.15.0-84.93
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 |
< 6.2.0-1013.13~22.04.1 Fix: upgrade to 6.2.0-1013.13~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1033.33 Fix: upgrade to 5.15.0-1033.33
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1018.18 Fix: upgrade to 5.15.0-1018.18
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1005.5 Fix: upgrade to 5.15.0-1005.5
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 |
< 6.1.0-1021.21 Fix: upgrade to 6.1.0-1021.21
|
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1044.50 Fix: upgrade to 5.15.0-1044.50
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1038.41 Fix: upgrade to 5.15.0-1038.41
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1025.29 Fix: upgrade to 5.15.0-1025.29
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1024.26 Fix: upgrade to 5.15.0-1024.26
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1039.41 Fix: upgrade to 5.15.0-1039.41
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1046.52 Fix: upgrade to 5.15.0-1046.52
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Debian:12 | debian | linux |
< 6.1.52-1 Fix: upgrade to 6.1.52-1
|
| Debian:13 | debian | linux |
< 6.4.11-1 Fix: upgrade to 6.4.11-1
|
| – | linux | linux_kernel |
>= 3.18, < 4.14.322 >= 4.15, < 4.19.291 >= 4.20, < 5.4.253 >= 5.5, < 5.10.190 >= 5.11, < 5.15.126 >= 5.16, < 6.1.45 >= 6.2, < 6.4.10 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | debian | debian_linux |
12.0 cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:* |
Original advisory text
Use-after-free in Linux kernel's net/sched: cls_route component
A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local privilege escalation. When route4_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instance of the filter. This causes a problem when updating a filter bound to a class, as tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of the still referenced class and allowing it to be deleted, leading to a use-after-free. We recommend upgrading past commit b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8.
References
- https://ubuntu.com/security/CVE-2023-4206 Third Party Advisory
- https://git.kernel.org/linus/b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-4206 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2023-4206 Vendor Advisory
- https://kernel.dance/b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8 URL
- https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html URL
- https://www.debian.org/security/2023/dsa-5492 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b8... Patch
- https://git.kernel.org URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/4xxx/CVE-2023-4206.j... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-4206 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-416Use After Free
Timeline
Published6 Sep 2023
Updated4 Nov 2026
First seen9 Sep 2026
Sources
UBUNTU-CVE-2023-4206 · OSV
CVE-2023-4206 · NVD
DEBIAN-CVE-2023-4206 · OSV
CVE-2023-4206 · OSV
Track software like this
Free during beta