CoreCVE
Back

HIGH

Use-after-free in Linux kernel's ipv4: igmp component

Published Dec 19, 2023

Description

A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation.

A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread.

We recommend upgrading past commit e2b706c691905fe78468c361aaabc719d0a496f1.

Affected products

Remediation

Red Hat statement

This vulnerability poses a moderate severity risk due to its potential to trigger a use-after-free issue when processing IGMPv2 query packets under specific conditions. An attacker could exploit this flaw by continuously sending crafted IGMPv2 query packets to a vulnerable system, causing a reference count underflow in the multicast group list management. Subsequently, this could lead to a use-after-free scenario, potentially resulting in a denial-of-service condition or other adverse effects. While exploitation requires specific configurations and continuous packet transmission, the impact could be significant, warranting attention and remediation to prevent potential exploitation and system instability.

Red Hat mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Weaknesses (1)

CWE-416

Use After Free

References (14)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Google
Published Dec 19, 2023
Updated May 12, 2026
Reserved Dec 18, 2023
Link CVE-2023-6932
CISA Vulnrichment
Updated May 10, 2024
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2023-6932
Red Hat
Severity Moderate
Public date Dec 19, 2023
Links CVE-2023-6932 - Bugzilla
ENISA EUVD
Assigner Google
Published Dec 19, 2023
Updated May 12, 2026
Exploited since n/a
Link EUVD-2023-59130
EUVD-2023-59130