CVE-2023-1829 PoC — Use-after-free in tcindex (traffic control index filter) in the Linux Kernel

Source

https://github.com/lanleft/CVE-2023-1829

Associated Vulnerability

Title: Use-after-free in tcindex (traffic control index filter) in the Linux Kernel (CVE-2023-1829)
Description:A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root. We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/ .

Readme

# CVE-2023-1829

The exploitation is tested on Ubuntu22.04 official source code 5.15.0-25.25 

Installing dependences for some netlink filter functions
```
sudo apt install libnftnl-dev libmnl-dev
```

Building step:
```bash
make 
```

## References 
- https://github.com/randorisec/CVE-2022-34918-LPE-PoC/tree/main

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →