Vulnerability Description
A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 ("tun: tun_chr_open(): correctly initialize socket uid"), - 66b2c338adce ("tap: tap_open(): correctly initialize socket uid"), pass "inode->i_uid" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | <= 6.4 |
| Redhat | Enterprise Linux | 8.0 |
| Fedoraproject | Fedora | 37 |
| Debian | Debian Linux | 10.0 |
Related Weaknesses (CWE)
References
- https://access.redhat.com/errata/RHSA-2023:6583Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-4194Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2229498Issue TrackingThird Party Advisory
- https://lore.kernel.org/all/[email protected]/Mailing ListPatchVendor Advisory
- https://lore.kernel.org/all/[email protected]/Mailing ListPatchVendor Advisory
- https://lore.kernel.org/all/[email protected]/Mailing ListPatchVendor Advisory
- https://access.redhat.com/errata/RHSA-2023:6583Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-4194Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2229498Issue TrackingThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html
- https://lists.fedoraproject.org/archives/list/[email protected]
- https://lists.fedoraproject.org/archives/list/[email protected]
- https://lore.kernel.org/all/[email protected]/Mailing ListPatchVendor Advisory
- https://lore.kernel.org/all/[email protected]/Mailing ListPatchVendor Advisory
- https://lore.kernel.org/all/[email protected]/Mailing ListPatchVendor Advisory
FAQ
What is CVE-2023-4194?
CVE-2023-4194 is a vulnerability with a CVSS score of 5.5 (MEDIUM). A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing ...
How severe is CVE-2023-4194?
CVE-2023-4194 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-4194?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Redhat Enterprise Linux, Fedoraproject Fedora, Debian Debian Linux.