Use-after-free in Linux kernel - CVE-2023-26606
Published: March 29, 2023
Vulnerability identifier: #VU74156
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-26606
CWE-ID: CWE-416
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within the ntfs_trim_fs() function in fs/ntfs3/bitmap.c in Linux kernel. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.
Affected software
Linux kernel
Ubuntu
linux-image-virtual (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-69-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-69-generic-64k (Ubuntu package)
linux-image-5.15.0-69-generic (Ubuntu package)
linux-image-5.15.0-69-lowlatency (Ubuntu package)
linux-image-5.15.0-69-generic-lpae (Ubuntu package)
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-gkeop-5.15 (Ubuntu package)
linux-image-5.15.0-1017-gkeop (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-5.15.0-1026-raspi-nolpae (Ubuntu package)
linux-image-5.15.0-1026-raspi (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-5.15.0-1027-ibm (Ubuntu package)
linux-image-5.15.0-1027-intel-iotg (Ubuntu package)
linux-image-gke-5.15 (Ubuntu package)
linux-image-5.15.0-1029-gke (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-5.15.0-1030-gke (Ubuntu package)
linux-image-5.15.0-1030-kvm (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-5.15.0-1031-gcp (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-5.15.0-1032-oracle (Ubuntu package)
linux-image-aws-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1033-aws (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-azure-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1035-azure-fde (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-5.15.0-1035-azure (Ubuntu package)
linux-image-oem-22.04a (Ubuntu package)
linux-image-oem-22.04 (Ubuntu package)
linux-image-5.17.0-1033-oem (Ubuntu package)
linux-image-5.19.0-40-generic-64k (Ubuntu package)
linux-image-5.19.0-40-generic (Ubuntu package)
linux-image-5.19.0-40-generic-lpae (Ubuntu package)
linux-image-generic-lpae-hwe-22.04 (Ubuntu package)
linux-image-generic-hwe-22.04 (Ubuntu package)
linux-image-generic-64k-hwe-22.04 (Ubuntu package)
linux-image-virtual-hwe-22.04 (Ubuntu package)
linux-image-5.19.0-1016-raspi (Ubuntu package)
linux-image-5.19.0-1016-raspi-nolpae (Ubuntu package)
linux-image-5.19.0-1020-gcp (Ubuntu package)
linux-image-5.19.0-1020-oracle (Ubuntu package)
linux-image-5.19.0-1021-kvm (Ubuntu package)
linux-image-5.19.0-1022-lowlatency (Ubuntu package)
linux-image-5.19.0-1022-lowlatency-64k (Ubuntu package)
linux-image-5.19.0-1023-azure (Ubuntu package)
linux-image-5.19.0-1023-aws (Ubuntu package)
linux-image-oem-22.04b (Ubuntu package)
linux-image-6.0.0-1017-oem (Ubuntu package)
linux-image-intel-iotg (Ubuntu package)
Ubuntu
linux-image-virtual (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-69-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-69-generic-64k (Ubuntu package)
linux-image-5.15.0-69-generic (Ubuntu package)
linux-image-5.15.0-69-lowlatency (Ubuntu package)
linux-image-5.15.0-69-generic-lpae (Ubuntu package)
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-gkeop-5.15 (Ubuntu package)
linux-image-5.15.0-1017-gkeop (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-5.15.0-1026-raspi-nolpae (Ubuntu package)
linux-image-5.15.0-1026-raspi (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-5.15.0-1027-ibm (Ubuntu package)
linux-image-5.15.0-1027-intel-iotg (Ubuntu package)
linux-image-gke-5.15 (Ubuntu package)
linux-image-5.15.0-1029-gke (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-5.15.0-1030-gke (Ubuntu package)
linux-image-5.15.0-1030-kvm (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-5.15.0-1031-gcp (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-5.15.0-1032-oracle (Ubuntu package)
linux-image-aws-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1033-aws (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-azure-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1035-azure-fde (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-5.15.0-1035-azure (Ubuntu package)
linux-image-oem-22.04a (Ubuntu package)
linux-image-oem-22.04 (Ubuntu package)
linux-image-5.17.0-1033-oem (Ubuntu package)
linux-image-5.19.0-40-generic-64k (Ubuntu package)
linux-image-5.19.0-40-generic (Ubuntu package)
linux-image-5.19.0-40-generic-lpae (Ubuntu package)
linux-image-generic-lpae-hwe-22.04 (Ubuntu package)
linux-image-generic-hwe-22.04 (Ubuntu package)
linux-image-generic-64k-hwe-22.04 (Ubuntu package)
linux-image-virtual-hwe-22.04 (Ubuntu package)
linux-image-5.19.0-1016-raspi (Ubuntu package)
linux-image-5.19.0-1016-raspi-nolpae (Ubuntu package)
linux-image-5.19.0-1020-gcp (Ubuntu package)
linux-image-5.19.0-1020-oracle (Ubuntu package)
linux-image-5.19.0-1021-kvm (Ubuntu package)
linux-image-5.19.0-1022-lowlatency (Ubuntu package)
linux-image-5.19.0-1022-lowlatency-64k (Ubuntu package)
linux-image-5.19.0-1023-azure (Ubuntu package)
linux-image-5.19.0-1023-aws (Ubuntu package)
linux-image-oem-22.04b (Ubuntu package)
linux-image-6.0.0-1017-oem (Ubuntu package)
linux-image-intel-iotg (Ubuntu package)
How to mitigate CVE-2023-26606
Install updates from vendor's website.
linux-image-virtual (Ubuntu package) - addressed in versions 5.15.0.69.67, 5.19.0.40.36
linux-image-generic-64k (Ubuntu package) - addressed in versions 5.15.0.69.67, 5.19.0.40.36
linux-image-generic (Ubuntu package) - addressed in versions 5.15.0.69.67, 5.19.0.40.36
linux-image-generic-lpae (Ubuntu package) - addressed in versions 5.15.0.69.67, 5.19.0.40.36
linux-image-lowlatency (Ubuntu package) - addressed in versions 5.15.0.69.74, 5.19.0.1022.18
linux-image-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0.69.74, 5.19.0.1022.18
linux-image-5.15.0-69-lowlatency-64k (Ubuntu package) - update to 5.15.0-69.76~20.04.1
linux-image-5.15.0-69-generic-64k (Ubuntu package) - update to 5.15.0-69.76~20.04.1
linux-image-5.15.0-69-generic (Ubuntu package) - update to 5.15.0-69.76~20.04.1
linux-image-5.15.0-69-lowlatency (Ubuntu package) - update to 5.15.0-69.76~20.04.1
linux-image-5.15.0-69-generic-lpae (Ubuntu package) - update to 5.15.0-69.76~20.04.1
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.27
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.27
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.30
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.30
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.30
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.30
linux-image-gkeop (Ubuntu package) - update to 5.15.0.1017.16
linux-image-gkeop-5.15 (Ubuntu package) - update to 5.15.0.1017.16
linux-image-5.15.0-1017-gkeop (Ubuntu package) - update to 5.15.0-1017.22
linux-image-raspi-nolpae (Ubuntu package) - addressed in versions 5.15.0.1026.23, 5.19.0.1016.15
linux-image-raspi (Ubuntu package) - addressed in versions 5.15.0.1026.23, 5.19.0.1016.15
linux-image-5.15.0-1026-raspi-nolpae (Ubuntu package) - update to 5.15.0-1026.28
linux-image-5.15.0-1026-raspi (Ubuntu package) - update to 5.15.0-1026.28
linux-image-ibm (Ubuntu package) - update to 5.15.0.1027.23
linux-image-intel-iotg (Ubuntu package) - update to 5.15.0.1027.26
linux-image-5.15.0-1027-ibm (Ubuntu package) - update to 5.15.0-1027.30
linux-image-5.15.0-1027-intel-iotg (Ubuntu package) - update to 5.15.0-1027.32
linux-image-gke-5.15 (Ubuntu package) - addressed in versions 5.15.0.1029.34~20.04.1, 5.15.0.1030.29
linux-image-5.15.0-1029-gke (Ubuntu package) - update to 5.15.0-1029.34~20.04.1
linux-image-kvm (Ubuntu package) - addressed in versions 5.15.0.1030.26, 5.19.0.1021.18
linux-image-gke (Ubuntu package) - update to 5.15.0.1030.29
linux-image-5.15.0-1030-gke (Ubuntu package) - update to 5.15.0-1030.35
linux-image-5.15.0-1030-kvm (Ubuntu package) - update to 5.15.0-1030.35
linux-image-gcp (Ubuntu package) - addressed in versions 5.15.0.1031.26, 5.15.0.1031.38~20.04.1, 5.19.0.1020.17
linux-image-5.15.0-1031-gcp (Ubuntu package) - update to 5.15.0-1031.38~20.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 5.15.0.1032.27, 5.15.0.1032.38~20.04.1, 5.19.0.1020.17
linux-image-5.15.0-1032-oracle (Ubuntu package) - update to 5.15.0-1032.38~20.04.1
linux-image-aws-lts-22.04 (Ubuntu package) - update to 5.15.0.1033.32
linux-image-5.15.0-1033-aws (Ubuntu package) - update to 5.15.0-1033.37~20.04.1
linux-image-aws (Ubuntu package) - addressed in versions 5.15.0.1033.37~20.04.22, 5.19.0.1023.20
linux-image-azure (Ubuntu package) - addressed in versions 5.15.0.1035.31, 5.15.0.1035.42~20.04.25, 5.19.0.1023.19
linux-image-azure-lts-22.04 (Ubuntu package) - update to 5.15.0.1035.31
linux-image-5.15.0-1035-azure-fde (Ubuntu package) - update to 5.15.0-1035.42.1
linux-image-azure-fde (Ubuntu package) - update to 5.15.0.1035.42.12
linux-image-5.15.0-1035-azure (Ubuntu package) - update to 5.15.0-1035.42~20.04.1
linux-image-oem-22.04a (Ubuntu package) - update to 5.17.0.1033.31
linux-image-oem-22.04 (Ubuntu package) - update to 5.17.0.1033.31
linux-image-5.17.0-1033-oem (Ubuntu package) - update to 5.17.0-1033.34
linux-image-5.19.0-40-generic-64k (Ubuntu package) - update to 5.19.0-40.41~22.04.1
linux-image-5.19.0-40-generic (Ubuntu package) - update to 5.19.0-40.41~22.04.1
linux-image-5.19.0-40-generic-lpae (Ubuntu package) - update to 5.19.0-40.41~22.04.1
linux-image-generic-lpae-hwe-22.04 (Ubuntu package) - update to 5.19.0.40.41~22.04.13
linux-image-generic-hwe-22.04 (Ubuntu package) - update to 5.19.0.40.41~22.04.13
linux-image-generic-64k-hwe-22.04 (Ubuntu package) - update to 5.19.0.40.41~22.04.13
linux-image-virtual-hwe-22.04 (Ubuntu package) - update to 5.19.0.40.41~22.04.13
linux-image-5.19.0-1016-raspi (Ubuntu package) - update to 5.19.0-1016.23
linux-image-5.19.0-1016-raspi-nolpae (Ubuntu package) - update to 5.19.0-1016.23
linux-image-5.19.0-1020-gcp (Ubuntu package) - update to 5.19.0-1020.22
linux-image-5.19.0-1020-oracle (Ubuntu package) - update to 5.19.0-1020.23
linux-image-5.19.0-1021-kvm (Ubuntu package) - update to 5.19.0-1021.22
linux-image-5.19.0-1022-lowlatency (Ubuntu package) - update to 5.19.0-1022.23
linux-image-5.19.0-1022-lowlatency-64k (Ubuntu package) - update to 5.19.0-1022.23
linux-image-5.19.0-1023-azure (Ubuntu package) - update to 5.19.0-1023.24
linux-image-5.19.0-1023-aws (Ubuntu package) - update to 5.19.0-1023.24
linux-image-oem-22.04b (Ubuntu package) - update to 6.0.0.1017.17
linux-image-6.0.0-1017-oem (Ubuntu package) - update to 6.0.0-1017.17
linux-image-generic-64k (Ubuntu package) - addressed in versions 5.15.0.69.67, 5.19.0.40.36
linux-image-generic (Ubuntu package) - addressed in versions 5.15.0.69.67, 5.19.0.40.36
linux-image-generic-lpae (Ubuntu package) - addressed in versions 5.15.0.69.67, 5.19.0.40.36
linux-image-lowlatency (Ubuntu package) - addressed in versions 5.15.0.69.74, 5.19.0.1022.18
linux-image-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0.69.74, 5.19.0.1022.18
linux-image-5.15.0-69-lowlatency-64k (Ubuntu package) - update to 5.15.0-69.76~20.04.1
linux-image-5.15.0-69-generic-64k (Ubuntu package) - update to 5.15.0-69.76~20.04.1
linux-image-5.15.0-69-generic (Ubuntu package) - update to 5.15.0-69.76~20.04.1
linux-image-5.15.0-69-lowlatency (Ubuntu package) - update to 5.15.0-69.76~20.04.1
linux-image-5.15.0-69-generic-lpae (Ubuntu package) - update to 5.15.0-69.76~20.04.1
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.27
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.27
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.30
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.30
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.30
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.30
linux-image-gkeop (Ubuntu package) - update to 5.15.0.1017.16
linux-image-gkeop-5.15 (Ubuntu package) - update to 5.15.0.1017.16
linux-image-5.15.0-1017-gkeop (Ubuntu package) - update to 5.15.0-1017.22
linux-image-raspi-nolpae (Ubuntu package) - addressed in versions 5.15.0.1026.23, 5.19.0.1016.15
linux-image-raspi (Ubuntu package) - addressed in versions 5.15.0.1026.23, 5.19.0.1016.15
linux-image-5.15.0-1026-raspi-nolpae (Ubuntu package) - update to 5.15.0-1026.28
linux-image-5.15.0-1026-raspi (Ubuntu package) - update to 5.15.0-1026.28
linux-image-ibm (Ubuntu package) - update to 5.15.0.1027.23
linux-image-intel-iotg (Ubuntu package) - update to 5.15.0.1027.26
linux-image-5.15.0-1027-ibm (Ubuntu package) - update to 5.15.0-1027.30
linux-image-5.15.0-1027-intel-iotg (Ubuntu package) - update to 5.15.0-1027.32
linux-image-gke-5.15 (Ubuntu package) - addressed in versions 5.15.0.1029.34~20.04.1, 5.15.0.1030.29
linux-image-5.15.0-1029-gke (Ubuntu package) - update to 5.15.0-1029.34~20.04.1
linux-image-kvm (Ubuntu package) - addressed in versions 5.15.0.1030.26, 5.19.0.1021.18
linux-image-gke (Ubuntu package) - update to 5.15.0.1030.29
linux-image-5.15.0-1030-gke (Ubuntu package) - update to 5.15.0-1030.35
linux-image-5.15.0-1030-kvm (Ubuntu package) - update to 5.15.0-1030.35
linux-image-gcp (Ubuntu package) - addressed in versions 5.15.0.1031.26, 5.15.0.1031.38~20.04.1, 5.19.0.1020.17
linux-image-5.15.0-1031-gcp (Ubuntu package) - update to 5.15.0-1031.38~20.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 5.15.0.1032.27, 5.15.0.1032.38~20.04.1, 5.19.0.1020.17
linux-image-5.15.0-1032-oracle (Ubuntu package) - update to 5.15.0-1032.38~20.04.1
linux-image-aws-lts-22.04 (Ubuntu package) - update to 5.15.0.1033.32
linux-image-5.15.0-1033-aws (Ubuntu package) - update to 5.15.0-1033.37~20.04.1
linux-image-aws (Ubuntu package) - addressed in versions 5.15.0.1033.37~20.04.22, 5.19.0.1023.20
linux-image-azure (Ubuntu package) - addressed in versions 5.15.0.1035.31, 5.15.0.1035.42~20.04.25, 5.19.0.1023.19
linux-image-azure-lts-22.04 (Ubuntu package) - update to 5.15.0.1035.31
linux-image-5.15.0-1035-azure-fde (Ubuntu package) - update to 5.15.0-1035.42.1
linux-image-azure-fde (Ubuntu package) - update to 5.15.0.1035.42.12
linux-image-5.15.0-1035-azure (Ubuntu package) - update to 5.15.0-1035.42~20.04.1
linux-image-oem-22.04a (Ubuntu package) - update to 5.17.0.1033.31
linux-image-oem-22.04 (Ubuntu package) - update to 5.17.0.1033.31
linux-image-5.17.0-1033-oem (Ubuntu package) - update to 5.17.0-1033.34
linux-image-5.19.0-40-generic-64k (Ubuntu package) - update to 5.19.0-40.41~22.04.1
linux-image-5.19.0-40-generic (Ubuntu package) - update to 5.19.0-40.41~22.04.1
linux-image-5.19.0-40-generic-lpae (Ubuntu package) - update to 5.19.0-40.41~22.04.1
linux-image-generic-lpae-hwe-22.04 (Ubuntu package) - update to 5.19.0.40.41~22.04.13
linux-image-generic-hwe-22.04 (Ubuntu package) - update to 5.19.0.40.41~22.04.13
linux-image-generic-64k-hwe-22.04 (Ubuntu package) - update to 5.19.0.40.41~22.04.13
linux-image-virtual-hwe-22.04 (Ubuntu package) - update to 5.19.0.40.41~22.04.13
linux-image-5.19.0-1016-raspi (Ubuntu package) - update to 5.19.0-1016.23
linux-image-5.19.0-1016-raspi-nolpae (Ubuntu package) - update to 5.19.0-1016.23
linux-image-5.19.0-1020-gcp (Ubuntu package) - update to 5.19.0-1020.22
linux-image-5.19.0-1020-oracle (Ubuntu package) - update to 5.19.0-1020.23
linux-image-5.19.0-1021-kvm (Ubuntu package) - update to 5.19.0-1021.22
linux-image-5.19.0-1022-lowlatency (Ubuntu package) - update to 5.19.0-1022.23
linux-image-5.19.0-1022-lowlatency-64k (Ubuntu package) - update to 5.19.0-1022.23
linux-image-5.19.0-1023-azure (Ubuntu package) - update to 5.19.0-1023.24
linux-image-5.19.0-1023-aws (Ubuntu package) - update to 5.19.0-1023.24
linux-image-oem-22.04b (Ubuntu package) - update to 6.0.0.1017.17
linux-image-6.0.0-1017-oem (Ubuntu package) - update to 6.0.0-1017.17