Home > Vulnerability Database > CVE-2023-6546

Mend.io Vulnerability Database

CVE-2023-6546

Date: December 21, 2023

A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci while restarting the gsm mux. This could allow a local unprivileged user to escalate their privileges on the system.

Language: C

Severity Score

7.0

Related Resources (34)

Url: http://www.openwall.com/lists/oss-security/2024/04/12/1

Url: https://nvd.nist.gov/vuln/detail/CVE-2023-6546

Url: https://access.redhat.com/errata/RHSA-2024:1250

Url: https://access.redhat.com/errata/RHSA-2024:1055

Url: https://access.redhat.com/errata/RHSA-2024:1253

Url: https://access.redhat.com/security/cve/CVE-2023-6546

Url: http://www.openwall.com/lists/oss-security/2024/04/11/7

Url: http://www.openwall.com/lists/oss-security/2024/04/17/1

Url: http://www.openwall.com/lists/oss-security/2024/04/16/2

Url: http://www.openwall.com/lists/oss-security/2024/04/11/9

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2023-6546

Url: http://www.openwall.com/lists/oss-security/2024/04/12/2

Url: https://access.redhat.com/errata/RHSA-2024:1306

Url: https://access.redhat.com/errata/RHSA-2024:0937

Url: https://access.redhat.com/errata/RHSA-2024:1607

Url: https://github.com/torvalds/linux/commit/3c4f8333b582487a2d1e02171f1465531cde53e3

Url: https://access.redhat.com/errata/RHSA-2024:2697

Url: https://access.redhat.com/errata/RHSA-2024:4577

Url: https://access.redhat.com/errata/RHSA-2024:4731

Url: https://www.zerodayinitiative.com/advisories/ZDI-CAN-20527

Url: https://access.redhat.com/errata/RHSA-2024:0930

Url: https://access.redhat.com/errata/RHSA-2024:2093

Url: http://www.openwall.com/lists/oss-security/2024/04/10/21

Url: https://access.redhat.com/errata/RHSA-2024:4970

Url: https://bugzilla.redhat.com/show_bug.cgi?id=2255498

Url: https://access.redhat.com/errata/RHSA-2024:2394

Url: https://access.redhat.com/errata/RHSA-2024:4729

Url: https://access.redhat.com/errata/RHSA-2024:1614

Url: https://access.redhat.com/errata/RHSA-2024:2621

Url: http://www.openwall.com/lists/oss-security/2024/04/10/18

Url: https://access.redhat.com/errata/RHSA-2024:1019

Url: https://access.redhat.com/errata/RHSA-2024:1018

Url: https://access.redhat.com/errata/RHSA-2024:1612

Url: https://www.mend.io/vulnerability-database/CVE-2023-6546

Severity Score

7.0

Weakness Type (CWE)

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CWE-362

Use After Free

CWE-416

CVSS v3.1

Base Score:	7.0
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	HIGH
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

Mend.io Vulnerability Database

We found results for “”

CVE-2023-6546

Date: December 21, 2023

Language: C

Severity Score

Related Resources (34)

Severity Score

Weakness Type (CWE)

CVSS v3.1

Do you need more information?