发布于3月6日3月6日 Members Amazon Linux AMI: CVE-2023-1281: Security patch for kernel (ALAS-2023-1701) Severity 7 CVSS (AV:L/AC:L/Au:S/C:C/I:C/A:C) Published 03/17/2023 Created 07/17/2023 Added 07/14/2023 Modified 01/28/2025 Description Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the destroyed tcf_ext. A local attacker user can use this vulnerability to elevate its privileges to root. This issue affects Linux Kernel: from 4.14 before git commit ee059170b1f7e94e55fa6cadee544e176a6e59c2. Solution(s) amazon-linux-upgrade-kernel References ALAS-2023-1701 CVE-2023-1281
