UBUNTU-CVE-2023-32269

UBUNTU-CVE-2023-32269 PUBLISHED CVSS 7.300000190734863 HIGH

An issue was discovered in the Linux kernel before 6.1.11. In net/netrom/af_netrom.c, there is a use-after-free because accept is also allowed for a successfully connected AF_NETROM socket. However, in order for an attacker to exploit this, the system must have netrom routing configured or the attacker must have the CAP_NET_ADMIN capability.

Risk Scores

CVSS 4.0

7.300000190734863

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
Ubuntu:22.04:LTS	linux-hwe-5.19	5.19.0-35.36~22.04.1, 5.19.0-40.41~22.04.1, 5.19.0-41.42~22.04.1
Ubuntu:22.04:LTS	linux-oem-6.1	6.1.0-1007.7, 0, 6.1.0-1004.4
Ubuntu:20.04:LTS	linux-azure-5.15	5.15.0-1020.25~20.04.1, 5.15.0-1019.24~20.04.1, 5.15.0-1017.20~20.04.1
Ubuntu:20.04:LTS	linux-oracle-5.13	0, 5.13.0-1011.13~20.04.2, 5.13.0-1015.19~20.04.1
Ubuntu:22.04:LTS	linux-intel-iotg	5.15.0-1013.17, 0, 5.15.0-1004.6
Ubuntu:22.04:LTS	linux-lowlatency-hwe-5.19	0, 5.19.0-1017.18~22.04.1, 5.19.0-1018.19~22.04.1
Ubuntu:Pro:Realtime:22.04:LTS	linux-realtime	5.15.0-1025.28, 5.15.0-1024.25, 5.15.0-1016.16
Ubuntu:20.04:LTS	linux-gke-5.15	5.15.0-1032.37~20.04.1, 5.15.0-1031.36~20.04.1, 5.15.0-1029.34~20.04.1
Ubuntu:22.04:LTS	linux-realtime	0, 5.15.0-1032.35
Ubuntu:22.04:LTS	linux	5.15.0-41.44, 5.15.0-67.74, 5.15.0-60.66
Ubuntu:Pro:16.04:LTS	linux-gcp	4.15.0-1136.152~16.04.1, 4.13.0-1012.16, 4.13.0-1013.17
Ubuntu:18.04:LTS	linux-raspi2	4.15.0-1093.99, 4.15.0-1131.139, 4.15.0-1130.138
Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-gcp-fips	4.15.0-2028.31, 4.15.0-2029.32, 4.15.0-2022.24
Ubuntu:18.04:LTS	linux-azure-5.4	5.4.0-1091.96~18.04.1, 5.4.0-1094.100~18.04.1, 5.4.0-1095.101~18.04.1
Ubuntu:Nvidia-BlueField:22.04:LTS	linux-bluefield	5.15.0-1014.16, 5.15.0-1015.17, 5.15.0-1011.13
Ubuntu:20.04:LTS	linux-gcp-5.11	5.11.0-1022.24~20.04.1, 5.11.0-1021.23~20.04.1, 5.11.0-1020.22~20.04.1
Ubuntu:20.04:LTS	linux-oem-5.13	5.13.0-1010.11, 5.13.0-1017.21, 5.13.0-1014.18
Ubuntu:Pro:14.04:LTS	linux-azure	4.15.0-1151.166~14.04.1, 4.15.0-1149.164~14.04.1, 4.15.0-1146.161~14.04.1
Ubuntu:20.04:LTS	linux-oem-5.10	5.10.0-1038.40, 5.10.0-1016.17, 5.10.0-1017.18
Ubuntu:Pro:FIPS:18.04:LTS	linux-fips	4.15.0-1011.12, 0

…and 116 more

Timeline

May 5, 2023 CVE Published
Oct 28, 2026 CVE Updated
Oct 31, 2026 Distribution Patch
Oct 31, 2026 Distribution Patch
Oct 31, 2026 Distribution Patch
Oct 31, 2026 Distribution Patch
Oct 31, 2026 Distribution Patch
Oct 31, 2026 Distribution Patch
Oct 31, 2026 Distribution Patch
Oct 31, 2026 Distribution Patch
Oct 31, 2026 Distribution Patch
Oct 31, 2026 Distribution Patch

References

https://ubuntu.com/security/CVE-2023-32269 report
https://git.kernel.org/linus/611792920925fb088ddccbe2783c7f92fdfb6b64 report
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.11 report
https://github.com/torvalds/linux/commit/611792920925fb088ddccbe2783c7f92fdfb6b64 report
https://ubuntu.com/security/notices/USN-6079-1 advisory
https://ubuntu.com/security/notices/USN-6080-1 advisory
https://ubuntu.com/security/notices/USN-6081-1 advisory
https://ubuntu.com/security/notices/USN-6084-1 advisory
https://ubuntu.com/security/notices/USN-6085-1 advisory
https://ubuntu.com/security/notices/USN-6090-1 advisory
https://ubuntu.com/security/notices/USN-6091-1 advisory
https://ubuntu.com/security/notices/USN-6092-1 advisory
https://ubuntu.com/security/notices/USN-6094-1 advisory
https://ubuntu.com/security/notices/USN-6095-1 advisory
https://ubuntu.com/security/notices/USN-6096-1 advisory
https://ubuntu.com/security/notices/USN-6109-1 advisory
https://ubuntu.com/security/notices/USN-6118-1 advisory
https://ubuntu.com/security/notices/USN-6132-1 advisory
https://ubuntu.com/security/notices/USN-6133-1 advisory
https://ubuntu.com/security/notices/USN-6134-1 advisory

…and 5 more

Open in Interactive Console →