CVE-2023-1281

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.14 through the version before git commit ee059170b1f7e94e55fa6cadee544e176a6e59c2

Description A Use After Free vulnerability in the Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when tcf exts exec() is called with the destroyed tcf ext. A local attacker user can use this vulnerability to elevate its privileges to root.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.