Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.9
CVE-2023-6546: Linux kernel lets local users gain admin privileges
CVE-2023-6546 · published 2 years ago
Summary
The Linux operating system’s core code has a timing flaw that can be triggered when two processes try to change the same GSM setting at the same time. This can cause the system to free memory that is still in use, letting an ordinary user obtain higher rights on the machine. Update to the latest kernel packages from your Linux distribution to fix the problem.
What to do
- Update canonical linux to version 5.15.0-91.101.
- Update debian linux to version 5.10.197-1.
- Update debian linux to version 6.1.52-1.
- Update debian linux to version 6.4.13-1.
- Update canonical linux-aws-5.15 to version 5.15.0-1051.56~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1053.61~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1048.56~20.04.1.
- Update canonical linux-gkeop-5.15 to version 5.15.0-1034.40~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-91.101~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1044.47~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1046.52~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-91.101~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1020.20~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1049.55~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1047.51~20.04.1.
- Update canonical linux-aws to version 5.15.0-1051.56.
- Update canonical linux-azure to version 5.15.0-1053.61.
- Update canonical linux-azure-fde to version 5.15.0-1053.61.1.
- Update canonical linux-gcp to version 5.15.0-1048.56.
- Update canonical linux-gke to version 5.15.0-1048.53.
- Update canonical linux-gkeop to version 5.15.0-1034.40.
- Update canonical linux-hwe-6.2 to version 6.2.0-39.40~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1044.47.
- Update canonical linux-intel-iotg to version 5.15.0-1046.52.
- Update canonical linux-kvm to version 5.15.0-1048.53.
- Update canonical linux-lowlatency to version 5.15.0-91.101.
- Update canonical linux-nvidia to version 5.15.0-1042.42.
- Update canonical linux-nvidia-tegra to version 5.15.0-1020.20.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1007.7.
- Update canonical linux-oem-6.1 to version 6.1.0-1023.23.
- Update canonical linux-oracle to version 5.15.0-1049.55.
- Update canonical linux-raspi to version 5.15.0-1044.47.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1027.31.
- Update canonical linux-bluefield to version 5.15.0-1033.35.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1044.46.
- Update canonical linux-realtime to version 5.15.0-1052.58.
- Update linux linux_kernel to version 6.5 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-91.101 Fix: upgrade to 5.15.0-91.101
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Debian:11 | debian | linux |
< 5.10.197-1 Fix: upgrade to 5.10.197-1
|
| Debian:12 | debian | linux |
< 6.1.52-1 Fix: upgrade to 6.1.52-1
|
| Debian:13 | debian | linux |
< 6.4.13-1 Fix: upgrade to 6.4.13-1
|
| Debian:14 | debian | linux |
< 6.4.13-1 Fix: upgrade to 6.4.13-1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1051.56~20.04.1 Fix: upgrade to 5.15.0-1051.56~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1053.61~20.04.1 Fix: upgrade to 5.15.0-1053.61~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1048.56~20.04.1 Fix: upgrade to 5.15.0-1048.56~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 |
< 5.15.0-1034.40~20.04.1 Fix: upgrade to 5.15.0-1034.40~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-91.101~20.04.1 Fix: upgrade to 5.15.0-91.101~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1044.47~20.04.1 Fix: upgrade to 5.15.0-1044.47~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1046.52~20.04.1 Fix: upgrade to 5.15.0-1046.52~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-91.101~20.04.1 Fix: upgrade to 5.15.0-91.101~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1020.20~20.04.1 Fix: upgrade to 5.15.0-1020.20~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1049.55~20.04.1 Fix: upgrade to 5.15.0-1049.55~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1047.51~20.04.1 Fix: upgrade to 5.15.0-1047.51~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
Showing 50 of 117. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1051.56 Fix: upgrade to 5.15.0-1051.56
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1053.61 Fix: upgrade to 5.15.0-1053.61
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1053.61.1 Fix: upgrade to 5.15.0-1053.61.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1048.56 Fix: upgrade to 5.15.0-1048.56
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1048.53 Fix: upgrade to 5.15.0-1048.53
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1034.40 Fix: upgrade to 5.15.0-1034.40
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 |
< 6.2.0-39.40~22.04.1 Fix: upgrade to 6.2.0-39.40~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1044.47 Fix: upgrade to 5.15.0-1044.47
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1046.52 Fix: upgrade to 5.15.0-1046.52
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1048.53 Fix: upgrade to 5.15.0-1048.53
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-91.101 Fix: upgrade to 5.15.0-91.101
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1042.42 Fix: upgrade to 5.15.0-1042.42
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1020.20 Fix: upgrade to 5.15.0-1020.20
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1007.7 Fix: upgrade to 5.15.0-1007.7
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 |
< 6.1.0-1023.23 Fix: upgrade to 6.1.0-1023.23
|
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1049.55 Fix: upgrade to 5.15.0-1049.55
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1044.47 Fix: upgrade to 5.15.0-1044.47
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1027.31 Fix: upgrade to 5.15.0-1027.31
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1033.35 Fix: upgrade to 5.15.0-1033.35
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1044.46 Fix: upgrade to 5.15.0-1044.46
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1052.58 Fix: upgrade to 5.15.0-1052.58
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| – | linux | linux_kernel |
< 6.5 6.5 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | fedoraproject | fedora |
39 cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* |
| – | redhat | enterprise_linux |
8.0 9.0 cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* |
| – | red hat | red hat enterprise linux 8 | All versions |
| – | red hat | red hat enterprise linux 8.2 advanced update support | All versions |
| – | red hat | red hat enterprise linux 8.4 advanced mission critical update support | All versions |
| – | red hat | red hat enterprise linux 8.4 telecommunications update service | All versions |
| – | red hat | red hat enterprise linux 8.4 update services for sap solutions | All versions |
| – | red hat | red hat enterprise linux 8.6 extended update support | All versions |
| – | red hat | red hat enterprise linux 8.8 extended update support | All versions |
| – | red hat | red hat enterprise linux 9 | All versions |
| – | red hat | red hat enterprise linux 9.0 extended update support | All versions |
| – | red hat | red hat enterprise linux 9.2 extended update support | All versions |
| – | red hat | red hat virtualization 4 for red hat enterprise linux 8 | All versions |
| – | red hat | rhol-5.7-rhel-8 | All versions |
| – | red hat | red hat enterprise linux 6 | All versions |
| – | red hat | red hat enterprise linux 7 | All versions |
Original advisory text
Kernel: gsm multiplexing race condition leads to privilege escalation
A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci while restarting the gsm mux. This could allow a local unprivileged user to escalate their privileges on the system.
References
- https://security-tracker.debian.org/tracker/CVE-2023-6546 Vendor Advisory
- https://ubuntu.com/security/CVE-2023-6546 Third Party Advisory
- https://git.kernel.org/linus/3c4f8333b582487a2d1e02171f1465531cde53e3 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-6546 Third Party Advisory
- https://access.redhat.com/downloads/content/package-browser/ URL
- https://catalog.redhat.com/software/containers/ URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/6xxx/CVE-2023-6546.j... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-6546 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2024/04/10/21
- http://www.openwall.com/lists/oss-security/2024/04/11/7
- http://www.openwall.com/lists/oss-security/2024/04/11/9
- http://www.openwall.com/lists/oss-security/2024/04/12/1
- http://www.openwall.com/lists/oss-security/2024/04/12/2
- http://www.openwall.com/lists/oss-security/2024/04/16/2
- http://www.openwall.com/lists/oss-security/2024/04/17/1
- https://access.redhat.com/errata/RHSA-2024:0930 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:0937 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:1018 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:1019 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:1055 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:1250 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:1253 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:1306 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:1607 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:1612 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:1614 vendor-advisory x_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2255498 issue-tracking x_refsource_REDHAT
- https://github.com/torvalds/linux/commit/3c4f8333b582487a2d1e02171f1465531cde53e...
- https://www.zerodayinitiative.com/advisories/ZDI-CAN-20527
- http://www.openwall.com/lists/oss-security/2024/04/10/18
- https://access.redhat.com/errata/RHSA-2024:2394 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:2621 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:2697 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:4577 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:4729 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:4731 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2023-6546 vdb-entry x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:2093 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:4970 vendor-advisory x_refsource_REDHAT
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Severity
7.9
High
Type
CWE-366Race Condition within a Thread
CWE-362Race Condition
Timeline
Published21 Dec 2023
Updated4 Nov 2026
First seen7 Aug 2026
Sources
DEBIAN-CVE-2023-6546 · OSV
CVE-2023-6546 · NVD
UBUNTU-CVE-2023-6546 · OSV
CVE-2023-6546 · OSV
CVE-2023-6546 · MITRE
Track software like this
Free during beta