Linux
Linux Security Releases - September 2023
linux-2023-09 Sep 1, 2023 Source: Vendor
Linux security advisories for September 2023, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2023-3777
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
5 lines
Showing 1–5 of 5
CVE-2023-3777
BR2023-0000-031319
Kernel
unclaimed
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
When nf_tables_delrule() is flushing table rules, it is ...
Credited as Kevin Rich
CVE-2023-4015
BR2023-0000-031323
Kernel
unclaimed
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
On an error when building a nftables rule, deactivating ...
Credited as Kevin Rich
CVE-2023-4623
BR2023-0000-031332
Kernel
unclaimed
A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
If a class with a link-shari...
Credited as Budimir Markovic
CVE-2023-4921
BR2023-0000-031339
Kernel
unclaimed
A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.
When the plug qdisc is used as a class of the qfq qdisc, s...
Credited as valis
CVE-2023-5197
BR2023-0000-031342
Kernel
unclaimed
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
Addition and removal of rules from chain bindings within...
Credited as Kevin Rich