CVE-2023-6546

Published: Dic 21, 2023 Last Modified: Feb 18, 2026 EU-VD ID: EUVD-2023-58776 Aliases: GSD-2023-6546

ExploitDB:

Other exploit source:

Google Dorks:

HIGH 7,0

Source: [email protected]

Attack Vector: local

Attack Complexity: high

Privileges Required: low

User Interaction: none

Scope: unchanged

Confidentiality: high

Integrity: high

Availability: high

Description

AI Translation Available

A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci while restarting the gsm mux. This could allow a local unprivileged user to escalate their privileges on the system.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score

0,0031

Percentile

0,5th

Updated

EPSS Score Trend (Last 90 Days)

362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Draft

Abstraction: Class Structure: Simple

Common Consequences

Security Scopes Affected:

Availability Confidentiality Integrity Access Control

Potential Impacts:

Dos: Resource Consumption (Cpu) Dos: Resource Consumption (Memory) Dos: Resource Consumption (Other) Dos: Crash, Exit, Or Restart Dos: Instability Read Files Or Directories Read Application Data Execute Unauthorized Code Or Commands Gain Privileges Or Assume Identity Bypass Protection Mechanism

Applicable Platforms

Languages: C, C++, Java

Technologies: ICS/OT, Mobile

Likelihood of Exploit: Medium

View CWE Details

366

Race Condition within a Thread

Draft

Abstraction: Base Structure: Simple

Common Consequences

Security Scopes Affected:

Integrity Other

Potential Impacts:

Alter Execution Logic Unexpected State

Applicable Platforms

Languages: C, C#, C++, Java

Likelihood of Exploit: Medium

View CWE Details

Operating System

Linux Kernel by Linux

Product Information

Vendor Linux

Product Linux Kernel

Version 6.5

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Linux Kernel by Linux

Product Information

Vendor Linux

Product Linux Kernel

Version 6.5

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Linux Kernel by Linux

Product Information

Vendor Linux

Product Linux Kernel

Version 6.5

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:linux:linux_kernel:6.5:rc6:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Linux Kernel by Linux

Product Information

Vendor Linux

Product Linux Kernel

Version 6.5

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:linux:linux_kernel:6.5:rc5:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Enterprise Linux by Redhat

Product Information

Vendor Redhat

Product Enterprise Linux

Version 9.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Linux Kernel by Linux

Product Information

Vendor Linux

Product Linux Kernel

Version Range Affected

To 6.5 (exclusive)

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Fedora by Fedoraproject

Product Information

Vendor Fedoraproject

Product Fedora

Version 39

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Linux Kernel by Linux

Product Information

Vendor Linux

Product Linux Kernel

Version 6.5

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Enterprise Linux by Redhat

Product Information

Vendor Redhat

Product Enterprise Linux

Version 8.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Linux Kernel by Linux

Product Information

Vendor Linux

Product Linux Kernel

Version 6.5

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

https://access.redhat.com/errata/RHSA-2024:0930

https://access.redhat.com/errata/RHSA-2024:0937

https://access.redhat.com/errata/RHSA-2024:1018

https://access.redhat.com/errata/RHSA-2024:1019

https://access.redhat.com/errata/RHSA-2024:1055

https://access.redhat.com/errata/RHSA-2024:1250

https://access.redhat.com/errata/RHSA-2024:1253

https://access.redhat.com/errata/RHSA-2024:1306

https://access.redhat.com/errata/RHSA-2024:1607

https://access.redhat.com/errata/RHSA-2024:1612

https://access.redhat.com/errata/RHSA-2024:1614

https://access.redhat.com/errata/RHSA-2024:2093

https://access.redhat.com/errata/RHSA-2024:2394

https://access.redhat.com/errata/RHSA-2024:2621

https://access.redhat.com/errata/RHSA-2024:2697

https://access.redhat.com/errata/RHSA-2024:4577

https://access.redhat.com/errata/RHSA-2024:4729

https://access.redhat.com/errata/RHSA-2024:4731

https://access.redhat.com/security/cve/CVE-2023-6546

https://bugzilla.redhat.com/show_bug.cgi?id=2255498

https://github.com/torvalds/linux/commit/3c4f8333b582487a2d…

https://github.com/torvalds/linux/commit/3c4f8333b582487a2d1e02171f1465531cde53…

https://www.zerodayinitiative.com/advisories/ZDI-CAN-20527

http://www.openwall.com/lists/oss-security/2024/04/10/18

http://www.openwall.com/lists/oss-security/2024/04/10/21

http://www.openwall.com/lists/oss-security/2024/04/11/7

http://www.openwall.com/lists/oss-security/2024/04/11/9

http://www.openwall.com/lists/oss-security/2024/04/12/1

http://www.openwall.com/lists/oss-security/2024/04/12/2

http://www.openwall.com/lists/oss-security/2024/04/16/2

http://www.openwall.com/lists/oss-security/2024/04/17/1

https://access.redhat.com/errata/RHSA-2024:0930

https://access.redhat.com/errata/RHSA-2024:0937

https://access.redhat.com/errata/RHSA-2024:1018

https://access.redhat.com/errata/RHSA-2024:1019

https://access.redhat.com/errata/RHSA-2024:1055

https://access.redhat.com/errata/RHSA-2024:1250

https://access.redhat.com/errata/RHSA-2024:1253

https://access.redhat.com/errata/RHSA-2024:1306

https://access.redhat.com/errata/RHSA-2024:1607

https://access.redhat.com/errata/RHSA-2024:1612

https://access.redhat.com/errata/RHSA-2024:1614

https://access.redhat.com/errata/RHSA-2024:2093

https://access.redhat.com/errata/RHSA-2024:2394

https://access.redhat.com/errata/RHSA-2024:2621

https://access.redhat.com/errata/RHSA-2024:2697

https://access.redhat.com/errata/RHSA-2024:4577

https://access.redhat.com/errata/RHSA-2024:4729

https://access.redhat.com/errata/RHSA-2024:4731

https://access.redhat.com/errata/RHSA-2024:4970

https://access.redhat.com/security/cve/CVE-2023-6546

https://bugzilla.redhat.com/show_bug.cgi?id=2255498

https://github.com/torvalds/linux/commit/3c4f8333b582487a2d…

https://github.com/torvalds/linux/commit/3c4f8333b582487a2d1e02171f1465531cde53…

https://www.zerodayinitiative.com/advisories/ZDI-CAN-20527

CVE-2023-6546

Description

EPSS (Exploit Prediction Scoring System)

EPSS (Exploit Prediction Scoring System)

EPSS Score Trend (Last 90 Days)

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Common Consequences

Applicable Platforms

Race Condition within a Thread

Common Consequences

Applicable Platforms

Linux Kernel by Linux

Product Information

Linux Kernel by Linux

Product Information

Linux Kernel by Linux

Product Information

Linux Kernel by Linux

Product Information

Enterprise Linux by Redhat

Product Information

Linux Kernel by Linux

Product Information

Fedora by Fedoraproject

Product Information

Linux Kernel by Linux

Product Information

Enterprise Linux by Redhat

Product Information

Linux Kernel by Linux

Product Information

Iscriviti alla newsletter