Skip to content
OpenAdvisories
High USN-6052-1 1 CVE

linux-ibm-5.4, linux-snapdragon vulnerability

Published May 1, 2023 · Updated Jun 3, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the Traffic-Control Index (TCINDEX) implementation
in the Linux kernel did not properly perform filter deactivation in some
situations. A local attacker could possibly use this to gain elevated
privileges. Please note that with the fix for this CVE, kernel support for
the TCINDEX classifier has been removed.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS linux-ibm-5.4 5.4.0-1048.53~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-snapdragon 4.15.0-1149.159

Vulnerabilities 1

  • High 7.8
    CVE-2023-1829 Public exploit

    Use-after-free in tcindex (traffic control index filter) in the Linux Kernel

    A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2023-1829