Use-after-free in Linux kernel - CVE-2023-3439

Vulnerability identifier: #VU77908

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-3439

CWE-ID: CWE-416

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error within the mctp_unregister() function in the MCTP protocol in the Linux kernel. A local user can trigger a use-after-free error and crash the kernel.

Linux kernel
Ubuntu
linux-image-generic-lpae (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-5.15.0-78-generic (Ubuntu package)
linux-image-5.15.0-78-generic-lpae (Ubuntu package)
linux-image-5.15.0-78-generic-64k (Ubuntu package)
linux-image-5.15.0-78-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-78-lowlatency (Ubuntu package)
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04d (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04c (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-gkeop-5.15 (Ubuntu package)
linux-image-5.15.0-1024-gkeop (Ubuntu package)
linux-image-5.15.0-1029-nvidia-lowlatency (Ubuntu package)
linux-image-nvidia-lowlatency (Ubuntu package)
linux-image-5.15.0-1029-nvidia (Ubuntu package)
linux-image-nvidia (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-5.15.0-1034-raspi-nolpae (Ubuntu package)
linux-image-5.15.0-1034-raspi (Ubuntu package)
linux-image-5.15.0-1034-ibm (Ubuntu package)
linux-image-5.15.0-1036-intel-iotg (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-gcp-lts-22.04 (Ubuntu package)
linux-image-gke-5.15 (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-5.15.0-1038-gke (Ubuntu package)
linux-image-5.15.0-1038-kvm (Ubuntu package)
linux-image-5.15.0-1038-gcp (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-5.15.0-1039-oracle (Ubuntu package)
linux-image-aws-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1040-aws (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-azure-lts-22.04 (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-5.15.0-1042-azure (Ubuntu package)
linux-image-5.15.0-1042-azure-fde (Ubuntu package)
linux-image-azure-fde-lts-22.04 (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-azure-cvm (Ubuntu package)
linux-image-intel-iotg (Ubuntu package)
linux-image-intel (Ubuntu package)

Install updates from vendor's website.

linux-image-generic-lpae (Ubuntu package) - update to 5.15.0.78.75
linux-image-virtual (Ubuntu package) - update to 5.15.0.78.75
linux-image-generic (Ubuntu package) - update to 5.15.0.78.75
linux-image-generic-64k (Ubuntu package) - update to 5.15.0.78.75
linux-image-lowlatency-64k (Ubuntu package) - update to 5.15.0.78.82
linux-image-lowlatency (Ubuntu package) - update to 5.15.0.78.82
linux-image-5.15.0-78-generic (Ubuntu package) - addressed in versions 5.15.0-78.85, 5.15.0-78.85~20.04.1
linux-image-5.15.0-78-generic-lpae (Ubuntu package) - addressed in versions 5.15.0-78.85, 5.15.0-78.85~20.04.1
linux-image-5.15.0-78-generic-64k (Ubuntu package) - addressed in versions 5.15.0-78.85, 5.15.0-78.85~20.04.1
linux-image-5.15.0-78-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0-78.85, 5.15.0-78.85~20.04.1
linux-image-5.15.0-78-lowlatency (Ubuntu package) - addressed in versions 5.15.0-78.85, 5.15.0-78.85~20.04.1
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.78.85~20.04.35
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.15.0.78.85~20.04.35
linux-image-oem-20.04d (Ubuntu package) - update to 5.15.0.78.85~20.04.38
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.15.0.78.85~20.04.38
linux-image-oem-20.04b (Ubuntu package) - update to 5.15.0.78.85~20.04.38
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.15.0.78.85~20.04.38
linux-image-oem-20.04c (Ubuntu package) - update to 5.15.0.78.85~20.04.38
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.78.85~20.04.38
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.15.0.78.85~20.04.38
linux-image-oem-20.04 (Ubuntu package) - update to 5.15.0.78.85~20.04.38
linux-image-gkeop (Ubuntu package) - update to 5.15.0.1024.23
linux-image-gkeop-5.15 (Ubuntu package) - addressed in versions 5.15.0.1024.23, 5.15.0.1024.29~20.04.20
linux-image-5.15.0-1024-gkeop (Ubuntu package) - addressed in versions 5.15.0-1024.29, 5.15.0-1024.29~20.04.1
linux-image-5.15.0-1029-nvidia-lowlatency (Ubuntu package) - update to 5.15.0-1029.29
linux-image-nvidia-lowlatency (Ubuntu package) - update to 5.15.0.1029.29
linux-image-5.15.0-1029-nvidia (Ubuntu package) - update to 5.15.0-1029.29
linux-image-nvidia (Ubuntu package) - update to 5.15.0.1029.29
linux-image-ibm (Ubuntu package) - update to 5.15.0.1034.30
linux-image-raspi-nolpae (Ubuntu package) - update to 5.15.0.1034.32
linux-image-raspi (Ubuntu package) - update to 5.15.0.1034.32
linux-image-5.15.0-1034-raspi-nolpae (Ubuntu package) - update to 5.15.0-1034.37
linux-image-5.15.0-1034-raspi (Ubuntu package) - update to 5.15.0-1034.37
linux-image-5.15.0-1034-ibm (Ubuntu package) - update to 5.15.0-1034.37
linux-image-intel-iotg (Ubuntu package) - addressed in versions 5.15.0.1036.35, 5.15.0.1036.41~20.04.26
linux-image-5.15.0-1036-intel-iotg (Ubuntu package) - addressed in versions 5.15.0-1036.41, 5.15.0-1036.41~20.04.1
linux-image-intel (Ubuntu package) - update to 5.15.0.1036.41~20.04.26
linux-image-kvm (Ubuntu package) - update to 5.15.0.1038.34
linux-image-gcp-lts-22.04 (Ubuntu package) - update to 5.15.0.1038.34
linux-image-gke-5.15 (Ubuntu package) - addressed in versions 5.15.0.1038.37, 5.15.0.1038.43~20.04.1
linux-image-gke (Ubuntu package) - update to 5.15.0.1038.37
linux-image-5.15.0-1038-gke (Ubuntu package) - addressed in versions 5.15.0-1038.43, 5.15.0-1038.43~20.04.1
linux-image-5.15.0-1038-kvm (Ubuntu package) - update to 5.15.0-1038.43
linux-image-5.15.0-1038-gcp (Ubuntu package) - addressed in versions 5.15.0-1038.46, 5.15.0-1038.46~20.04.1
linux-image-gcp (Ubuntu package) - update to 5.15.0.1038.46~20.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 5.15.0.1039.34, 5.15.0.1039.45~20.04.1
linux-image-5.15.0-1039-oracle (Ubuntu package) - addressed in versions 5.15.0-1039.45, 5.15.0-1039.45~20.04.1
linux-image-aws-lts-22.04 (Ubuntu package) - update to 5.15.0.1040.39
linux-image-5.15.0-1040-aws (Ubuntu package) - addressed in versions 5.15.0-1040.45, 5.15.0-1040.45~20.04.1
linux-image-aws (Ubuntu package) - update to 5.15.0.1040.45~20.04.29
linux-image-azure-lts-22.04 (Ubuntu package) - update to 5.15.0.1042.38
linux-image-azure (Ubuntu package) - addressed in versions 5.15.0.1042.38, 5.15.0.1042.49~20.04.32
linux-image-5.15.0-1042-azure (Ubuntu package) - addressed in versions 5.15.0-1042.49, 5.15.0-1042.49~20.04.1
linux-image-5.15.0-1042-azure-fde (Ubuntu package) - addressed in versions 5.15.0-1042.49.1, 5.15.0-1042.49~20.04.1.1
linux-image-azure-fde-lts-22.04 (Ubuntu package) - update to 5.15.0.1042.49.20
linux-image-azure-fde (Ubuntu package) - addressed in versions 5.15.0.1042.49.20, 5.15.0.1042.49~20.04.1.21
linux-image-azure-cvm (Ubuntu package) - update to 5.15.0.1042.49~20.04.32

• https://github.com/torvalds/linux/commit/b561275d633bcd8e0e8055ab86f1a13df75a0269
• https://bugzilla.redhat.com/show_bug.cgi?id=2217915
• http://www.openwall.com/lists/oss-security/2023/07/02/1

• Local denial of service in Linux kernel MCTP
• Ubuntu update for linux
• Ubuntu update for linux-intel-iotg-5.15