Vulnerability Database

320,116

Total vulnerabilities in the database

CVE-2023-3609

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.

If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.

We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.

  • Published: Jul 21, 2023
  • Updated: Nov 16, 2025
  • CVE: CVE-2023-3609
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
linux / linux_kernel 6.4-rc1 6.4-rc1.x
linux / linux_kernel 6.4-rc4 6.4-rc4.x
linux / linux_kernel 6.4-rc5 6.4-rc5.x
linux / linux_kernel 6.4-rc6 6.4-rc6.x
linux / linux_kernel 6.4-rc2 6.4-rc2.x
linux / linux_kernel 6.4-rc3 6.4-rc3.x
linux / linux_kernel 4.14 6.4
debian / debian_linux 10.0 10.0.x
debian / debian_linux 11.0 11.0.x