{"id":"CVE-2023-1829","title":"A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect…","summary":"A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-416","CWE-416"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel < 4.14.308","linux_kernel >= 4.15, < 4.19.276","linux_kernel >= 4.20, < 5.4.235","linux_kernel >= 5.5, < 5.10.173","linux_kernel >= 5.11, < 5.15.100","linux_kernel >= 5.16, < 6.1.18","linux_kernel >= 6.2, < 6.2.5"],"patched":["linux_kernel 6.2.5"],"published":"2023-04-12","updated":"2026-07-29","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-1829","references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8c710f75256bb3cf05ac7b1672c82b92c43f3d28","label":"cve-coordination@google.com"},{"url":"https://kernel.dance/#8c710f75256bb3cf05ac7b1672c82b92c43f3d28","label":"cve-coordination@google.com"},{"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html","label":"cve-coordination@google.com"},{"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html","label":"cve-coordination@google.com"},{"url":"https://security.netapp.com/advisory/ntap-20230601-0001/","label":"cve-coordination@google.com"},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8c710f75256bb3cf05ac7b1672c82b92c43f3d28","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kernel.dance/#8c710f75256bb3cf05ac7b1672c82b92c43f3d28","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20230601-0001/","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","exploit-available"],"epss":0.01037,"epssPercentile":0.62443,"ingestedAt":"2026-07-29T15:48:24.362Z","exploits":{"github":1,"githubRepos":["https://github.com/lanleft/CVE-2023-1829"],"checkedAt":"2026-09-23T07:13:24.652Z"},"exploitAvailable":true,"slug":"CVE-2023-1829","body":"## Overview\n\nA use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root.\n\n\nWe recommend upgrading past commit   8c710f75256bb3cf05ac7b1672c82b92c43f3d28 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/ .\n\n## Affected\n\n- `linux_kernel < 4.14.308`\n- `linux_kernel >= 4.15, < 4.19.276`\n- `linux_kernel >= 4.20, < 5.4.235`\n- `linux_kernel >= 5.5, < 5.10.173`\n- `linux_kernel >= 5.11, < 5.15.100`\n- `linux_kernel >= 5.16, < 6.1.18`\n- `linux_kernel >= 6.2, < 6.2.5`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.2.5`","depth":"midnight","depthScore":55,"depthScoreParts":{"impact":42.9,"likelihood":0.2,"exploitation":12,"ransomware":0},"changes":[{"seq":4640,"id":"CVE-2023-1829","ts":1788887196462,"field":"exploit_available","old":"false","new":"true"},{"seq":3523,"id":"CVE-2023-1829","ts":1788886312587,"field":"exploit_available","old":"true","new":"false"},{"seq":2377,"id":"CVE-2023-1829","ts":1788882981955,"field":"exploit_available","old":"false","new":"true"},{"seq":1406,"id":"CVE-2023-1829","ts":1788882394743,"field":"exploit_available","old":"true","new":"false"},{"seq":520,"id":"CVE-2023-1829","ts":1788881830646,"field":"exploit_available","old":"false","new":"true"}]}