← CVE Intelligence

CVE-2023-4194

Kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid PUBLISHED

Description (CNA)

A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 ("tun: tun_chr_open(): correctly initialize socket uid"), - 66b2c338adce ("tap: tap_open(): correctly initialize socket uid"), pass "inode->i_uid" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 9unaffected 0:5.14.0-362.8.1.el9_3 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:5.14.0-362.8.1.el9_3 before *
Red Hat / Red Hat Enterprise Linux 6unaffected
Red Hat / Red Hat Enterprise Linux 7unaffected
Red Hat / Red Hat Enterprise Linux 7unaffected
Red Hat / Red Hat Enterprise Linux 8affected
Red Hat / Red Hat Enterprise Linux 8affected
Red Hat / Red Hat Enterprise Linux 9affected
Red Hat / Red Hat Virtualization 4unknown

CWE

CWE-843

References

ADP enrichment

CVE

No English description supplied.