Linux kernel (net/sched hfsc): Use-after-free in sch_hfsc qdisc - local root

Impact

Use-after-free in sch_hfsc qdisc - local root

Who can reach it

Any tenant process in a container with CAP_NET_ADMIN in a userns

What to do

Livepatchable; otherwise drain + reboot

References

Related entries

• glibc (ld.so): Looney Tunables: buffer overflow in the ld.so GLIBC_TUNABLES parser - local root on default installsCVE-2023-4911 · glibc (ld.so)High
• Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): Missing or insufficient validation of user-suppliedCVE-2023-52678 · Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd)High
• Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): An out-of-bounds access in the amdkfd (KFD computeCVE-2023-52816 · Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd)High
• Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): A use-after-free in the amdkfd (KFD compute driverCVE-2023-52825 · Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd)High
• Linux i915 GPU kernel driver: A use-after-free in the i915 GPU kernel driver. The general shape is that a GPU object isCVE-2023-52913 · Linux i915 GPU kernel driverHigh
• Linux i915 GPU kernel driver (GEM tiling): A double-free reachable by racing I915_GEM_SET_TILING from multiple threads.CVE-2023-52930 · Linux i915 GPU kernel driver (GEM tiling)High