Vulnerability · Published Jul 11, 2023 · Assigned by redhat
CVE-2023-3269Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal
High 7.8
In plain English
A high-severity use-after-free in Fedora from Fedora. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 70% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Official description
A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbitrary kernel code, escalate containers, and gain root privileges.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | linux | 6.1.37-1 | DEBIAN-CVE-2023-3269 |
| Debian:12 | linux | 6.1.37-1 | DSA-5448-1 |
| Debian:13 | linux | 6.3.11-1 | DEBIAN-CVE-2023-3269 |
| Debian:14 | linux | 6.3.11-1 | DEBIAN-CVE-2023-3269 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2023-3269 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | 6.2.0-1008.8~22.04.1 | UBUNTU-CVE-2023-3269 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2023-3269 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | 6.2.0-1008.8~22.04.1 | UBUNTU-CVE-2023-3269 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2023-3269 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2023-3269 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | 6.2.0-1010.10~22.04.1 | UBUNTU-CVE-2023-3269 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | 6.2.0-26.26~22.04.1 | UBUNTU-CVE-2023-3269 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | 6.2.0-1009.9~22.04.1 | UBUNTU-CVE-2023-3269 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2023-3269 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | 6.1.0-1017.17 | USN-6249-1 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | 6.1.0-1017.17 | UBUNTU-CVE-2023-3269 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2023-3269 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2023-3269 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2023-3269 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | kernel | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Fedora | Fedora | see references |
Weakness: CWE-416 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
References
- https://access.redhat.com/security/cve/CVE-2023-3269 vdb-entry, x_refsource_REDHAT
- RHBZ#2215268 issue-tracking, x_refsource_REDHAT
- https://www.openwall.com/lists/oss-security/2023/07/05/1
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6AAA64CUPSMBW6XDTXPQJ3KQWYQ4K7L/
- http://seclists.org/fulldisclosure/2023/Jul/43
- http://www.openwall.com/lists/oss-security/2023/07/28/1
- http://www.openwall.com/lists/oss-security/2023/08/25/1
- http://www.openwall.com/lists/oss-security/2023/08/25/4
- https://security.netapp.com/advisory/ntap-20230908-0001/