USN-6033-1: Linux kernel (OEM) vulnerabilities

It was discovered that the Traffic-Control Index (TCINDEX) implementation
in the Linux kernel did not properly perform filter deactivation in some
situations. A local attacker could possibly use this to gain elevated
privileges. Please note that with the fix for this CVE, kernel support for
the TCINDEX classifier has been removed. (CVE-2023-1829)

William Zhao discovered that the Traffic Control (TC) subsystem in the
Linux kernel did not properly handle network packet retransmission in
certain situations. A local attacker could use …

control cve deactivation denial of service filter fix kernel linux linux kernel local network network packet oem packet privileges service subsystem support traffic usn vulnerabilities