CVE-2023-6546

2023-12-2120:15:08

CWE-362

CWE-416

[email protected]

web.nvd.nist.gov

race condition

gsm 0710

tty multiplexor

linux kernel

local privilege escalation

use-after-free

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

10.1%

JSON

A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci while restarting the gsm mux. This could allow a local unprivileged user to escalate their privileges on the system.

Affected configurations

Nvd

Node

linuxlinux_kernelRange<6.5

linuxlinux_kernelMatch6.5rc1

linuxlinux_kernelMatch6.5rc2

linuxlinux_kernelMatch6.5rc3

linuxlinux_kernelMatch6.5rc4

linuxlinux_kernelMatch6.5rc5

linuxlinux_kernelMatch6.5rc6

Node

fedoraprojectfedoraMatch39

Node

redhatenterprise_linuxMatch8.0

redhatenterprise_linuxMatch9.0

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel6.5cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*
linuxlinux_kernel6.5cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*
linuxlinux_kernel6.5cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*
linuxlinux_kernel6.5cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:*
linuxlinux_kernel6.5cpe:2.3:o:linux:linux_kernel:6.5:rc5:*:*:*:*:*:*
linuxlinux_kernel6.5cpe:2.3:o:linux:linux_kernel:6.5:rc6:*:*:*:*:*:*
fedoraprojectfedora39cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
redhatenterprise_linux8.0cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
redhatenterprise_linux9.0cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	6.5	cpe:2.3:o:linux:linux_kernel:6.5:rc1::::::
linux	linux_kernel	6.5	cpe:2.3:o:linux:linux_kernel:6.5:rc2::::::
linux	linux_kernel	6.5	cpe:2.3:o:linux:linux_kernel:6.5:rc3::::::
linux	linux_kernel	6.5	cpe:2.3:o:linux:linux_kernel:6.5:rc4::::::
linux	linux_kernel	6.5	cpe:2.3:o:linux:linux_kernel:6.5:rc5::::::
linux	linux_kernel	6.5	cpe:2.3:o:linux:linux_kernel:6.5:rc6::::::
fedoraproject	fedora	39	cpe:2.3:o:fedoraproject:fedora:39:::::::*
redhat	enterprise_linux	8.0	cpe:2.3:o:redhat:enterprise_linux:8.0:::::::*
redhat	enterprise_linux	9.0	cpe:2.3:o:redhat:enterprise_linux:9.0:::::::*