Skip to content
OpenAdvisories
High USN-6069-1 1 CVE

linux-raspi, linux-raspi-5.4, linux-raspi2 vulnerability

Published May 10, 2023 · Updated Jun 3, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the Traffic-Control Index (TCINDEX) implementation
in the Linux kernel did not properly perform filter deactivation in some
situations. A local attacker could possibly use this to gain elevated
privileges. Please note that with the fix for this CVE, kernel support for
the TCINDEX classifier has been removed.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS linux-raspi-5.4 5.4.0-1084.95~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-raspi2 4.15.0-1131.139
Ubuntu · 20.04 LTS 20.04:LTS linux-raspi 5.4.0-1084.95

Vulnerabilities 1

  • High 7.8
    CVE-2023-1829 Public exploit

    Use-after-free in tcindex (traffic control index filter) in the Linux Kernel

    A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2023-1829