Skip to content
OpenAdvisories
High USN-6058-1 1 CVE

linux-aws, linux-aws-hwe vulnerability

Published May 5, 2023 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the Traffic-Control Index (TCINDEX) implementation
in the Linux kernel did not properly perform filter deactivation in some
situations. A local attacker could possibly use this to gain elevated
privileges. Please note that with the fix for this CVE, kernel support for
the TCINDEX classifier has been removed.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS linux-aws 4.15.0-1155.168
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-aws-hwe 4.15.0-1155.168~16.04.1

Vulnerabilities 1

  • High 7.8
    CVE-2023-1829 Public exploit

    Use-after-free in tcindex (traffic control index filter) in the Linux Kernel

    A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2023-1829