CVE-2023-3611

HIGH7.8

Out-of-bounds write in Linux kernel's net/sched: sch_qfq component

Published Jul 21, 2023

Modified 11 months ago

No fix available

Details

An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.

The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks.

We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.

References

FIXhttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e337087c3b5805fe0b8a46ba622a962880b5d64 WEBhttps://kernel.dance/3e337087c3b5805fe0b8a46ba622a962880b5d64 WEBhttps://lists.debian.org/debian-lts-announce/2023/10/msg00027.html WEBhttps://lists.debian.org/debian-lts-announce/2024/01/msg00004.html WEBhttps://security.netapp.com/advisory/ntap-20230908-0002/ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2023-3611 WEBhttps://www.debian.org/security/2023/dsa-5480 WEBhttps://www.debian.org/security/2023/dsa-5492

CVSS Analysis

CVSS v3.1

7.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness Type (CWE)

Memory Safety

CWE-787

Out-of-bounds Write

Ecosystems

Timeline

PublishedJul 21, 2023

ModifiedFeb 13, 2025

CVE-2023-3611 | Mondoo Vulnerability Intelligence