CVE-2023-4208 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-4208 Interim 1 12 2025-08-06T01:51:17Z current 2023-09-07T23:22:19Z 2025-08-06T01:51:17Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-4208 A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. When u32_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instance of the filter. This causes a problem when updating a filter bound to a class, as tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of the still referenced class and allowing it to be deleted, leading to a use-after-free. We recommend upgrading past commit 3044b16e7c6fe5d24b1cdbcf1bd0a9d92d1ebd81. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Liberty Linux 7 SUSE Liberty Linux 8 SUSE Liberty Linux 9 bpftool-3.10.0-1160.105.1.el7 bpftool-4.18.0-513.5.1.el8_9 bpftool-7.2.0-362.8.1.el9_3 kernel-3.10.0-1160.105.1.el7 kernel-4.18.0-513.5.1.el8_9 kernel-5.14.0-362.8.1.el9_3 kernel-abi-stablelists-4.18.0-513.5.1.el8_9 kernel-abi-stablelists-5.14.0-362.8.1.el9_3 kernel-abi-whitelists-3.10.0-1160.105.1.el7 kernel-core-4.18.0-513.5.1.el8_9 kernel-core-5.14.0-362.8.1.el9_3 kernel-cross-headers-4.18.0-513.5.1.el8_9 kernel-cross-headers-5.14.0-362.8.1.el9_3 kernel-debug-3.10.0-1160.105.1.el7 kernel-debug-4.18.0-513.5.1.el8_9 kernel-debug-5.14.0-362.8.1.el9_3 kernel-debug-core-4.18.0-513.5.1.el8_9 kernel-debug-core-5.14.0-362.8.1.el9_3 kernel-debug-devel-3.10.0-1160.105.1.el7 kernel-debug-devel-4.18.0-513.5.1.el8_9 kernel-debug-devel-5.14.0-362.8.1.el9_3 kernel-debug-devel-matched-5.14.0-362.8.1.el9_3 kernel-debug-modules-4.18.0-513.5.1.el8_9 kernel-debug-modules-5.14.0-362.8.1.el9_3 kernel-debug-modules-core-5.14.0-362.8.1.el9_3 kernel-debug-modules-extra-4.18.0-513.5.1.el8_9 kernel-debug-modules-extra-5.14.0-362.8.1.el9_3 kernel-debug-uki-virt-5.14.0-362.8.1.el9_3 kernel-devel-3.10.0-1160.105.1.el7 kernel-devel-4.18.0-513.5.1.el8_9 kernel-devel-5.14.0-362.8.1.el9_3 kernel-devel-matched-5.14.0-362.8.1.el9_3 kernel-doc-3.10.0-1160.105.1.el7 kernel-doc-4.18.0-513.5.1.el8_9 kernel-doc-5.14.0-362.8.1.el9_3 kernel-headers-3.10.0-1160.105.1.el7 kernel-headers-4.18.0-513.5.1.el8_9 kernel-headers-5.14.0-362.8.1.el9_3 kernel-modules-4.18.0-513.5.1.el8_9 kernel-modules-5.14.0-362.8.1.el9_3 kernel-modules-core-5.14.0-362.8.1.el9_3 kernel-modules-extra-4.18.0-513.5.1.el8_9 kernel-modules-extra-5.14.0-362.8.1.el9_3 kernel-tools-3.10.0-1160.105.1.el7 kernel-tools-4.18.0-513.5.1.el8_9 kernel-tools-5.14.0-362.8.1.el9_3 kernel-tools-libs-3.10.0-1160.105.1.el7 kernel-tools-libs-4.18.0-513.5.1.el8_9 kernel-tools-libs-5.14.0-362.8.1.el9_3 kernel-tools-libs-devel-3.10.0-1160.105.1.el7 kernel-tools-libs-devel-4.18.0-513.5.1.el8_9 kernel-tools-libs-devel-5.14.0-362.8.1.el9_3 kernel-uki-virt-5.14.0-362.8.1.el9_3 libperf-5.14.0-362.8.1.el9_3 perf-3.10.0-1160.105.1.el7 perf-4.18.0-513.5.1.el8_9 perf-5.14.0-362.8.1.el9_3 python-perf-3.10.0-1160.105.1.el7 python3-perf-4.18.0-513.5.1.el8_9 python3-perf-5.14.0-362.8.1.el9_3 rtla-5.14.0-362.8.1.el9_3 rv-5.14.0-362.8.1.el9_3 bpftool-3.10.0-1160.105.1.el7 as a component of SUSE Liberty Linux 7 kernel-3.10.0-1160.105.1.el7 as a component of SUSE Liberty Linux 7 kernel-abi-whitelists-3.10.0-1160.105.1.el7 as a component of SUSE Liberty Linux 7 kernel-debug-3.10.0-1160.105.1.el7 as a component of SUSE Liberty Linux 7 kernel-debug-devel-3.10.0-1160.105.1.el7 as a component of SUSE Liberty Linux 7 kernel-devel-3.10.0-1160.105.1.el7 as a component of SUSE Liberty Linux 7 kernel-doc-3.10.0-1160.105.1.el7 as a component of SUSE Liberty Linux 7 kernel-headers-3.10.0-1160.105.1.el7 as a component of SUSE Liberty Linux 7 kernel-tools-3.10.0-1160.105.1.el7 as a component of SUSE Liberty Linux 7 kernel-tools-libs-3.10.0-1160.105.1.el7 as a component of SUSE Liberty Linux 7 kernel-tools-libs-devel-3.10.0-1160.105.1.el7 as a component of SUSE Liberty Linux 7 perf-3.10.0-1160.105.1.el7 as a component of SUSE Liberty Linux 7 python-perf-3.10.0-1160.105.1.el7 as a component of SUSE Liberty Linux 7 bpftool-4.18.0-513.5.1.el8_9 as a component of SUSE Liberty Linux 8 kernel-4.18.0-513.5.1.el8_9 as a component of SUSE Liberty Linux 8 kernel-abi-stablelists-4.18.0-513.5.1.el8_9 as a component of SUSE Liberty Linux 8 kernel-core-4.18.0-513.5.1.el8_9 as a component of SUSE Liberty Linux 8 kernel-cross-headers-4.18.0-513.5.1.el8_9 as a component of SUSE Liberty Linux 8 kernel-debug-4.18.0-513.5.1.el8_9 as a component of SUSE Liberty Linux 8 kernel-debug-core-4.18.0-513.5.1.el8_9 as a component of SUSE Liberty Linux 8 kernel-debug-devel-4.18.0-513.5.1.el8_9 as a component of SUSE Liberty Linux 8 kernel-debug-modules-4.18.0-513.5.1.el8_9 as a component of SUSE Liberty Linux 8 kernel-debug-modules-extra-4.18.0-513.5.1.el8_9 as a component of SUSE Liberty Linux 8 kernel-devel-4.18.0-513.5.1.el8_9 as a component of SUSE Liberty Linux 8 kernel-doc-4.18.0-513.5.1.el8_9 as a component of SUSE Liberty Linux 8 kernel-headers-4.18.0-513.5.1.el8_9 as a component of SUSE Liberty Linux 8 kernel-modules-4.18.0-513.5.1.el8_9 as a component of SUSE Liberty Linux 8 kernel-modules-extra-4.18.0-513.5.1.el8_9 as a component of SUSE Liberty Linux 8 kernel-tools-4.18.0-513.5.1.el8_9 as a component of SUSE Liberty Linux 8 kernel-tools-libs-4.18.0-513.5.1.el8_9 as a component of SUSE Liberty Linux 8 kernel-tools-libs-devel-4.18.0-513.5.1.el8_9 as a component of SUSE Liberty Linux 8 perf-4.18.0-513.5.1.el8_9 as a component of SUSE Liberty Linux 8 python3-perf-4.18.0-513.5.1.el8_9 as a component of SUSE Liberty Linux 8 bpftool-7.2.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-abi-stablelists-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-core-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-cross-headers-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-debug-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-debug-core-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-debug-devel-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-debug-devel-matched-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-debug-modules-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-debug-modules-core-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-debug-modules-extra-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-debug-uki-virt-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-devel-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-devel-matched-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-doc-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-headers-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-modules-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-modules-core-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-modules-extra-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-tools-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-tools-libs-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-tools-libs-devel-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-uki-virt-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 libperf-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 perf-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 python3-perf-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 rtla-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 rv-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. When u32_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instance of the filter. This causes a problem when updating a filter bound to a class, as tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of the still referenced class and allowing it to be deleted, leading to a use-after-free. We recommend upgrading past commit 3044b16e7c6fe5d24b1cdbcf1bd0a9d92d1ebd81. CVE-2023-4208 SUSE Liberty Linux 7:bpftool-3.10.0-1160.105.1.el7 SUSE Liberty Linux 7:kernel-3.10.0-1160.105.1.el7 SUSE Liberty Linux 7:kernel-abi-whitelists-3.10.0-1160.105.1.el7 SUSE Liberty Linux 7:kernel-debug-3.10.0-1160.105.1.el7 SUSE Liberty Linux 7:kernel-debug-devel-3.10.0-1160.105.1.el7 SUSE Liberty Linux 7:kernel-devel-3.10.0-1160.105.1.el7 SUSE Liberty Linux 7:kernel-doc-3.10.0-1160.105.1.el7 SUSE Liberty Linux 7:kernel-headers-3.10.0-1160.105.1.el7 SUSE Liberty Linux 7:kernel-tools-3.10.0-1160.105.1.el7 SUSE Liberty Linux 7:kernel-tools-libs-3.10.0-1160.105.1.el7 SUSE Liberty Linux 7:kernel-tools-libs-devel-3.10.0-1160.105.1.el7 SUSE Liberty Linux 7:perf-3.10.0-1160.105.1.el7 SUSE Liberty Linux 7:python-perf-3.10.0-1160.105.1.el7 SUSE Liberty Linux 8:bpftool-4.18.0-513.5.1.el8_9 SUSE Liberty Linux 8:kernel-4.18.0-513.5.1.el8_9 SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-513.5.1.el8_9 SUSE Liberty Linux 8:kernel-core-4.18.0-513.5.1.el8_9 SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-513.5.1.el8_9 SUSE Liberty Linux 8:kernel-debug-4.18.0-513.5.1.el8_9 SUSE Liberty Linux 8:kernel-debug-core-4.18.0-513.5.1.el8_9 SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-513.5.1.el8_9 SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-513.5.1.el8_9 SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-513.5.1.el8_9 SUSE Liberty Linux 8:kernel-devel-4.18.0-513.5.1.el8_9 SUSE Liberty Linux 8:kernel-doc-4.18.0-513.5.1.el8_9 SUSE Liberty Linux 8:kernel-headers-4.18.0-513.5.1.el8_9 SUSE Liberty Linux 8:kernel-modules-4.18.0-513.5.1.el8_9 SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-513.5.1.el8_9 SUSE Liberty Linux 8:kernel-tools-4.18.0-513.5.1.el8_9 SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-513.5.1.el8_9 SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-513.5.1.el8_9 SUSE Liberty Linux 8:perf-4.18.0-513.5.1.el8_9 SUSE Liberty Linux 8:python3-perf-4.18.0-513.5.1.el8_9 SUSE Liberty Linux 9:bpftool-7.2.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-core-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-debug-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-debug-core-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-devel-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-doc-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-headers-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-modules-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-modules-core-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-tools-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:libperf-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:perf-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:python3-perf-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:rtla-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:rv-5.14.0-362.8.1.el9_3 important 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H