https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 12:36:49 +0000 https://vulnerability.circl.lu/vuln/cve-2023-3609 <p><strong>Affected:</strong> Linux Kernel</p> <p>A use-after-free vulnerability in the Linux kernel&#39;s net/sched: cls_u32 component can be exploited to achieve local privilege escalation.</p> <p>If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.</p> <p>We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.</p> <p><strong>Affected:</strong> Linux Kernel</p> <p>A use-after-free vulnerability in the Linux kernel&#39;s net/sched: cls_u32 component can be exploited to achieve local privilege escalation.</p> <p>If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.</p> <p>We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.</p> https://vulnerability.circl.lu/vuln/cve-2023-3609