Yüksek CVSS 7

CVE-2023-6546: Linux Kernel: güvenlik açığı

Yayın: 21 Aralık 2023 23:15 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci while restarting the gsm mux. This could allow a local unprivileged user to escalate their privileges on the system.

Özet bilgiler

Ürün: Linux Linux Kernel
CVSS v3.1: 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: %0,74 (yüzdelik 55)
CWE: CWE-366
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
linux-linux-kernel	—	—	6.5
linux-linux-kernel	6.5	6.5	—
linux-linux-kernel	6.5	6.5	—
linux-linux-kernel	6.5	6.5	—
linux-linux-kernel	6.5	6.5	—
linux-linux-kernel	6.5	6.5	—
linux-linux-kernel	6.5	6.5	—
fedoraproject-fedora	39	39	—
redhat-enterprise-linux	8.0	8.0	—
redhat-enterprise-linux	9.0	9.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları