CVE-2023-6932 Use-after-free in Linux kernel's ipv4: igmp component
A local attacker can exploit a race condition in the Linux kernel's IGMP component to achieve privilege escalation via a use-after-free vulnerability.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-6932?
CVE-2023-6932 is a high-severity use after free vulnerability in Debian Debian Linux, published on 19 Dec 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation.
A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread.
We recommend upgrading past commit e2b706c691905fe78468c361aaabc719d0a496f1.
Weakness: CWE-416
Which versions are affected by CVE-2023-6932?
It affects 2 products.
Linux distribution packages (11)
kgraft-patch-SLE12-SP5_Update_41 SUSE:Linux Enterprise Live Patching 12 SP5 | All versions | 9-2.1 |
kgraft-patch-SLE12-SP5_Update_44 SUSE:Linux Enterprise Live Patching 12 SP5 | All versions | 7-2.1 |
kgraft-patch-SLE12-SP5_Update_49 SUSE:Linux Enterprise Live Patching 12 SP5 | All versions | 3-2.1 |
kernel-livepatch-SLE15-SP1_Update_38 SUSE:Linux Enterprise Live Patching 15 SP1 | All versions | 9-150100.2.1 |
kernel-livepatch-SLE15-SP1_Update_39 SUSE:Linux Enterprise Live Patching 15 SP1 | All versions | 9-150100.2.1 |
kernel-livepatch-SLE15-SP1_Update_45 SUSE:Linux Enterprise Live Patching 15 SP1 | All versions | 3-150100.2.1 |
kernel-livepatch-SLE15-SP4-RT_Update_16 SUSE:Linux Enterprise Live Patching 15 SP4 | All versions | 2-150400.2.1 |
kernel-livepatch-SLE15-SP4-RT_Update_17 SUSE:Linux Enterprise Live Patching 15 SP4 | All versions | 2-150400.2.1 |
kernel-livepatch-SLE15-SP4_Update_21 SUSE:Linux Enterprise Live Patching 15 SP4 | All versions | 2-150400.2.1 |
kernel-livepatch-SLE15-SP5-RT_Update_8 SUSE:Linux Enterprise Live Patching 15 SP5 | All versions | 2-150500.2.1 |
kernel-livepatch-SLE15-SP5_Update_8 SUSE:Linux Enterprise Live Patching 15 SP5 | All versions | 2-150500.2.1 |
Products include Debian Debian Linux, Linux kernel.
How do I fix CVE-2023-6932?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2023-6932 being exploited?
There is no known exploitation of CVE-2023-6932 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as AZL-32263, AZL-34870, BELL-CVE-2023-6932, CVE-2024-0584, DEBIAN-CVE-2023-6932, GHSA-m2ff-6895-cr34 and 9 more.