CVE-2023-6531

תיאור (מקור, אנגלית)

A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic() on the socket that the SKB is queued on.

מדדים

CVSS 3.1

7.0 (HIGH) מקור הציון: NVD CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-17/9/2026

CWE

CWE-362

מוצרים מושפעים

linux: linux kernel; redhat: enterprise linux

קישורים

• https://lore.kernel.org/all/c716c88321939156909cfa1bd8b0faaf1c804103.170186879‮… Mailing ListPatch
• https://lore.kernel.org/all/c716c88321939156909cfa1bd8b0faaf1c804103.170186879‮… Mailing ListPatch
• https://access.redhat.com/errata/RHSA-2024:2394
• https://access.redhat.com/security/cve/CVE-2023-6531 Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2253034 Issue Tracking
• http://packetstormsecurity.com/files/176533/Linux-Broken-Unix-GC-Interaction-U‮…
• https://access.redhat.com/errata/RHSA-2024:2394
• https://access.redhat.com/security/cve/CVE-2023-6531 Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2253034 Issue Tracking
• https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html