Lucene search

K
cvelistRedhatCVELIST:CVE-2023-6546
HistoryDec 21, 2023 - 8:01 p.m.

CVE-2023-6546 Kernel: gsm multiplexing race condition leads to privilege escalation

2023-12-2120:01:03
CWE-416
redhat
raw.githubusercontent.com
3
linux
gsm 0710
race condition
privilege escalation
use-after-free
gsmmux

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.5%

A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci while restarting the gsm mux. This could allow a local unprivileged user to escalate their privileges on the system.

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.5%