Linux kernel (mm VMA): StackRot: privilege escalation via non-RCU-protected VMA traversal

CVSS 7.8CVE-2023-3269Kernel, userspace & hypervisorcurated

Impact

StackRot: privilege escalation via non-RCU-protected VMA traversal; affects 6.1-6.4

Who can reach it

Local user / tenant process

What to do

Livepatchable; otherwise drain + reboot

References

https://access.redhat.com/security/cve/CVE-2023-3269

Related entries

Linux kernel (nf_tables): UAF in nft_set_lookup_global after mixed named/anonymous set batches - local rootCVE-2023-3390 · Linux kernel (nf_tables)High
Linux (Xen netback): Buffer overrun in netback due to an unusual packet - guest attacks dom0CVE-2023-34319 · Linux (Xen netback)High
Xen (64-bit PV): Top-level shadow reference dropped too early for 64-bit PV guests - privilege escalation to hostCVE-2023-34322 · Xen (64-bit PV)High
Xen (libfsimage/pygrub): Multiple vulnerabilities in libfsimage disk handlingCVE-2023-34325 · Xen (libfsimage/pygrub)High
Linux kernel (nf_tables): Stack out-of-bounds read/write in nft_byteorder_eval() - local root (Pwn2Own)CVE-2023-35001 · Linux kernel (nf_tables)High
Linux kernel (netfilter pipapo): UAF from improper element removal in nft_pipapo_remove() - local rootCVE-2023-4004 · Linux kernel (netfilter pipapo)High

All Kernel, userspace & hypervisor entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.