← CVE Intelligence

CVE-2023-6546

Kernel: gsm multiplexing race condition leads to privilege escalation PUBLISHED

Description (CNA)

A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci while restarting the gsm mux. This could allow a local unprivileged user to escalate their privileges on the system.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 8unaffected 0:4.18.0-513.24.1.rt7.326.el8_9 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:4.18.0-513.24.1.el8_9 before *
Red Hat / Red Hat Enterprise Linux 8unaffected
Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update Supportunaffected 0:4.18.0-193.136.1.el8_2 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 0:4.18.0-305.134.1.el8_4 before *
Red Hat / Red Hat Enterprise Linux 8.4 Telecommunications Update Serviceunaffected 0:4.18.0-305.134.1.rt7.210.el8_4 before *
Red Hat / Red Hat Enterprise Linux 8.4 Telecommunications Update Serviceunaffected 0:4.18.0-305.134.1.el8_4 before *
Red Hat / Red Hat Enterprise Linux 8.4 Update Services for SAP Solutionsunaffected 0:4.18.0-305.134.1.el8_4 before *
Red Hat / Red Hat Enterprise Linux 8.4 Update Services for SAP Solutionsunaffected
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Supportunaffected 0:4.18.0-372.93.1.el8_6 before *
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Supportunaffected
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 0:4.18.0-477.55.1.el8_8 before *
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected
Red Hat / Red Hat Enterprise Linux 9unaffected 0:5.14.0-427.13.1.el9_4 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:5.14.0-427.13.1.el9_4 before *
Red Hat / Red Hat Enterprise Linux 9.0 Extended Update Supportunaffected 0:5.14.0-70.93.2.el9_0 before *
Red Hat / Red Hat Enterprise Linux 9.0 Extended Update Supportunaffected 0:5.14.0-70.93.1.rt21.165.el9_0 before *
Red Hat / Red Hat Enterprise Linux 9.0 Extended Update Supportunaffected
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 0:5.14.0-284.55.1.el9_2 before *
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 0:5.14.0-284.55.1.rt14.340.el9_2 before *
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected
Red Hat / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8unaffected 0:4.18.0-372.93.1.el8_6 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v5.7.13-16 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v5.7.13-7 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v6.8.1-408 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v5.7.13-19 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v1.0.0-480 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v5.7.13-9 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v0.4.0-248 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v1.14.6-215 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v6.8.1-431 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v1.1.0-228 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v5.8.1-471 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v2.9.6-15 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v5.7.13-3 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v5.7.13-27 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v5.7.13-12 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v0.1.0-527 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v0.1.0-225 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v0.28.1-57 before *
Red Hat / Red Hat Enterprise Linux 6unaffected
Red Hat / Red Hat Enterprise Linux 7unaffected
Red Hat / Red Hat Enterprise Linux 7unaffected
Red Hat / Red Hat Enterprise Linux 9affected

CWE

CWE-366

References

ADP enrichment

CVE

No English description supplied.