LSN-0101-1: Kernel Live Patch Security Notice

Xingyuan Mo discovered that the netfilter subsystem in the Linux kernel did
not properly handle inactive elements in its PIPAPO data structure, leading
to a use-after-free vulnerability. A local attacker could use this to cause
a denial of service (system crash) or possibly execute arbitrary code.(CVE-2023-6817)

It was discovered that the IGMP protocol implementation in the Linux kernel
contained a race condition, leading to a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system …

arbitrary code attacker code crash cve data denial of service free implementation kernel linux linux kernel live local netfilter notice patch protocol security security notice service structure subsystem system use-after-free vulnerability