CVE-2023-1829

CVE-2023-1829 is a use-after-free vulnerability in the Linux Kernel's traffic control index filter (tcindex) that allows for local privilege escalation. Specifically, the tcindex_delete function can improperly deactivate filters, leading to a double-free condition. This flaw enables a local attacker to elevate their privileges to root on affected Linux systems. The vulnerability has a CVSS score of 7.8 (High), indicating a significant risk due to its low attack complexity and potential for high impact on confidentiality, integrity, and availability. An attacker requires local access and no user interaction is needed for exploitation. Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not yet garnered widespread attention.