Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation

Summary

Product

Vulnerabilities 1

• High 7.8
  CVE-2023-3269 Public exploit

  Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal

  A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbit…

  Red Hat Fedora Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux
  Jul 11, 2023

Revision history

1. 2023-07-25 #4

   Neue Updates von Ubuntu aufgenommen

2. 2023-07-10 #3

   Neue Updates von IGEL aufgenommen

3. 2023-07-06 #2

   Neue Updates von Fedora aufgenommen

4. 2023-07-05 #1

   Initiale Fassung

References

• Ubuntu Security Notice USN-6249-1 vom 2023-07-26
  https://ubuntu.com/security/notices/USN-6249-1
• Ubuntu Security Notice USN-6250-1 vom 2023-07-26
  https://ubuntu.com/security/notices/USN-6250-1
• IGEL Security Notice ISN-2023-11 vom 2023-07-11
  https://kb.igel.com/securitysafety/en/isn-2023-11-stackrot-in-igel-os-kernel-90227676.html
• Fedora Security Advisory FEDORA-2023-2932E6C7D8 vom 2023-07-06
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-2932e6c7d8
• GitHub Repository lrh2000/StackRot vom 2023-07-05
  https://github.com/lrh2000/StackRot