Use-after-free in Linux kernel - CVE-2023-53186

Vulnerability identifier: #VU115385

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-53186

CWE-ID: CWE-416

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the skb_try_coalesce() function in net/core/skbuff.c. A local user can escalate privileges on the system.

Linux kernel
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
kpatch-patch-5_14_0-284_134_1 (Red Hat package)
kpatch-patch-5_14_0-284_117_1 (Red Hat package)
kpatch-patch-5_14_0-284_104_1 (Red Hat package)
kpatch-patch-5_14_0-284_92_1 (Red Hat package)
kpatch-patch-5_14_0-284_79_1 (Red Hat package)
kernel (Red Hat package)

Install update from vendor's repository.

Linux kernel - update to 5.15.108
kpatch-patch-5_14_0-284_134_1 (Red Hat package) - update to 1-2.el9_2
kpatch-patch-5_14_0-284_117_1 (Red Hat package) - update to 1-8.el9_2
kpatch-patch-5_14_0-284_104_1 (Red Hat package) - update to 1-11.el9_2
kpatch-patch-5_14_0-284_92_1 (Red Hat package) - update to 1-13.el9_2
kpatch-patch-5_14_0-284_79_1 (Red Hat package) - update to 1-15.el9_2
kernel (Red Hat package) - update to 5.14.0-284.142.1.el9_2

• https://git.kernel.org/stable/c/0646dc31ca886693274df5749cd0c8c1eaaeb5ca
• https://git.kernel.org/stable/c/5f692c992a3bb9a8018e3488098b401a4229e7ec
• https://git.kernel.org/stable/c/71850b5af92da21b4862a9bc55bda61091247d00
• https://git.kernel.org/stable/c/906a6689bb0191ad2a44131a3377006aa098af59
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.108

• Use-after-free in Linux kernel core
• Red Hat Enterprise Linux 9 update for kernel
• Red Hat Enterprise Linux 9 update for multiple packages