Skip to content
OpenAdvisories
High USN-6047-1 1 CVE

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-4.15, linux-azure-5.4, linux-gcp, linux-gcp-4.15, linux-gcp-5.4, linux-gke, linux-gkeop, linux-hwe, linux-hwe-5.4, linux-ibm, linux-kvm, linux-oracle, linux-oracle-5.4 vulnerability

Published Apr 27, 2023 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the Traffic-Control Index (TCINDEX) implementation
in the Linux kernel did not properly perform filter deactivation in some
situations. A local attacker could possibly use this to gain elevated
privileges. Please note that with the fix for this CVE, kernel support for
the TCINDEX classifier has been removed.

Fixed packages 24

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS linux 4.15.0-210.221
Ubuntu · 18.04 LTS 18.04:LTS linux-aws-5.4 5.4.0-1101.109~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-azure-4.15 4.15.0-1164.179
Ubuntu · 18.04 LTS 18.04:LTS linux-azure-5.4 5.4.0-1107.113~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-gcp-4.15 4.15.0-1149.165
Ubuntu · 18.04 LTS 18.04:LTS linux-gcp-5.4 5.4.0-1104.113~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-hwe-5.4 5.4.0-148.165~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-kvm 4.15.0-1139.144
Ubuntu · 18.04 LTS 18.04:LTS linux-oracle 4.15.0-1118.129
Ubuntu · 18.04 LTS 18.04:LTS linux-oracle-5.4 5.4.0-1100.109~18.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux 5.4.0-148.165
Ubuntu · 20.04 LTS 20.04:LTS linux-aws 5.4.0-1101.109
Ubuntu · 20.04 LTS 20.04:LTS linux-azure 5.4.0-1107.113
Ubuntu · 20.04 LTS 20.04:LTS linux-gcp 5.4.0-1104.113
Ubuntu · 20.04 LTS 20.04:LTS linux-gke 5.4.0-1098.105
Ubuntu · 20.04 LTS 20.04:LTS linux-gkeop 5.4.0-1068.72
Ubuntu · 20.04 LTS 20.04:LTS linux-ibm 5.4.0-1048.53
Ubuntu · 20.04 LTS 20.04:LTS linux-kvm 5.4.0-1090.96
Ubuntu · 20.04 LTS 20.04:LTS linux-oracle 5.4.0-1100.109
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS linux-azure 4.15.0-1164.179~14.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-azure 4.15.0-1164.179~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-gcp 4.15.0-1149.165~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-hwe 4.15.0-210.221~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-oracle 4.15.0-1118.129~16.04.1

Vulnerabilities 1

  • High 7.8
    CVE-2023-1829 Public exploit

    Use-after-free in tcindex (traffic control index filter) in the Linux Kernel

    A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2023-1829