IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
7.0Yüksek

CVE-2023-6546Kernel: gsm multiplexing race condition leads to privilege escalation

Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critica… Yayım: (2 yıl önce)

Açıklama

A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci while restarting the gsm mux. This could allow a local unprivileged user to escalate their privileges on the system.

Zayıflık türü (CWE): CWE-366CWE-362

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
enterprise linux 8 —
enterprise linux 9 —
fedoraproject fedora 39
linux linux kernel < 6.5
logging 5.7 —
redhat enterprise linux 8.0
Red Hat Red Hat Enterprise Linux 6 —
Red Hat Red Hat Enterprise Linux 7 —
Red Hat Red Hat Enterprise Linux 8 all versions
Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support all versions
Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support all versions
Red Hat Red Hat Enterprise Linux 8.4 Telecommunications Update Service all versions
Red Hat Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions all versions
Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support all versions
Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support all versions
Red Hat Red Hat Enterprise Linux 9 all versions
Red Hat Red Hat Enterprise Linux 9.0 Extended Update Support all versions
Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support all versions
Red Hat Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 all versions
Red Hat RHOL-5.7-RHEL-8 all versions
rhel aus 8.2 —
rhel aus 8.4 —
rhel e4s 8.4 —
rhel eus 8.6 —
rhel eus 8.8 —
rhel eus 9.0 —
rhel eus 9.2 —
rhel tus 8.4 —
rhev hypervisor 4.4 —

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (10)
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* < 6.5
  • cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.5:rc5:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.5:rc6:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

Aynı üründe son açıklar — Linux kernel

Puansız
CVE-2026-99284

net: skbuff: propagate shared-frag marker in skb_zerocopy()

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker in skb_zerocopy() skb_zerocopy() moves frag descriptors from @from into @to and takes a reference on each frag, but it does not copy skb_shinfo(fro…

Puansız
CVE-2026-99279

ksmbd: reclaim ended sessions on logoff and expiration

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reclaim ended sessions on logoff and expiration LOGOFF and previous-session replacement leave sessions Expired with a zero credential expiry. Ended sessions can retain their memory a…

Puansız
CVE-2026-99282

net/sched: sch_teql: fix use-after-free on lower qdisc drop

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_teql: fix use-after-free on lower qdisc drop The issue: teql_master_xmit() tests the slave's ndo_start_xmit() return value against NETDEV_TX_OK alone. A slave that consumes t…

Puansız
CVE-2026-99281

tun: Require CAP_NET_ADMIN to attach to an ownerless device

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: tun: Require CAP_NET_ADMIN to attach to an ownerless device Twenty years ago I made creating a tuntap device require CAP_NET_ADMIN in commit ca6bb5d7ab22 ("[NET]: Require CAP_NET_ADMIN to c…