CVE-2023-6531: Kernel: gc's deletion of an skb races with unix_stream_read_generic() leading to uaf

Modified

AliasesSUSE-SU-2024:1033-1SUSE-SU-2024:1054-1UBUNTU-CVE-2023-6531+1 more

Published 21-01-2024Last modified 01-11-2026

Vulnerability summary

CVE-2023-6531 is a high (CVSS 7.0) vulnerability in linux linux_kernel. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 13.1% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 7, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

7.0/10

010

High · v3.1 (CVE.org)

EPSS score

0.22%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 60 · Related 57

DLA-3711-1 DSA-5593-1 DSA-5594-1 RHSA-2024:2394 SUSE-SU-2024:0115-1 SUSE-SU-2024:0129-1+55 more

Timeline

21-01-2024
PublishedVulnerability first disclosed.
01-11-2026
Last modifiedVulnerability information updated.

Description

A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic() on the socket that the SKB is queued on.

CVSS metrics

4 scores · 4 sources · 1 version

v3.17.0

EPSS trend

Probability

0.22%

Chance of exploitation in the next 30 days

Percentile

13%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.22% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-362Concurrent Execution using Shared Resource with Improper SynchronizationThe product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu74 products

linux-allwinner-5.19All versions (No fix recorded)
linux-aws-5.0All versions (No fix recorded)
linux-aws-5.11All versions (No fix recorded)
linux-aws-5.13All versions (No fix recorded)
linux-aws-5.19All versions (No fix recorded)

linux-aws-5.3All versions (No fix recorded)
linux-aws-5.8All versions (No fix recorded)
linux-aws-6.2All versions (No fix recorded)
linux-aws-6.5All versions (No fix recorded)
linux-azureAll versions (No fix recorded)
linux-azure-5.11All versions (No fix recorded)
linux-azure-5.13All versions (No fix recorded)
linux-azure-5.19All versions (No fix recorded)
linux-azure-5.3All versions (No fix recorded)
linux-azure-5.8All versions (No fix recorded)
linux-azure-6.2All versions (No fix recorded)
linux-azure-6.5All versions (No fix recorded)
linux-azure-edgeAll versions (No fix recorded)
linux-azure-fdeAll versions (No fix recorded)
linux-azure-fde-5.19All versions (No fix recorded)
linux-azure-fde-6.2All versions (No fix recorded)
linux-gcpAll versions (No fix recorded)
linux-gcp-5.11All versions (No fix recorded)
linux-gcp-5.13All versions (No fix recorded)
linux-gcp-5.19All versions (No fix recorded)
linux-gcp-5.3All versions (No fix recorded)
linux-gcp-5.8All versions (No fix recorded)
linux-gcp-6.2All versions (No fix recorded)
linux-gcp-6.5< 6.5.0-1013.13~22.04.1
linux-gkeAll versions (No fix recorded)
linux-gke-4.15All versions (No fix recorded)
linux-gke-5.15All versions (No fix recorded)
linux-gke-5.4All versions (No fix recorded)
linux-gkeop-5.4All versions (No fix recorded)
linux-hweAll versions (No fix recorded)
linux-hwe-5.11All versions (No fix recorded)
linux-hwe-5.13All versions (No fix recorded)
linux-hwe-5.19All versions (No fix recorded)
linux-hwe-5.8All versions (No fix recorded)
linux-hwe-6.2All versions (No fix recorded)
linux-hwe-6.5< 6.5.0-17.17~22.04.1
linux-hwe-edgeAll versions (No fix recorded)
linux-intel-5.13All versions (No fix recorded)
linux-intel-iot-realtimeAll versions (No fix recorded)
linux-lowlatency-hwe-5.19All versions (No fix recorded)
linux-lowlatency-hwe-6.2All versions (No fix recorded)
linux-lowlatency-hwe-6.5< 6.5.0-17.17.1.1.1~22.04.1
linux-nvidia-6.2All versions (No fix recorded)
linux-nvidia-6.5< 6.5.0-1014.14
linux-oemAll versions (No fix recorded)
linux-oem-5.10All versions (No fix recorded)
linux-oem-5.13All versions (No fix recorded)
linux-oem-5.14All versions (No fix recorded)
linux-oem-5.17All versions (No fix recorded)
linux-oem-5.6All versions (No fix recorded)
linux-oem-6.0All versions (No fix recorded)
linux-oem-6.1< 6.1.0-1033.33
linux-oem-6.5< 6.5.0-1014.15
linux-oracle-5.0All versions (No fix recorded)
linux-oracle-5.11All versions (No fix recorded)
linux-oracle-5.13All versions (No fix recorded)
linux-oracle-5.3All versions (No fix recorded)
linux-oracle-5.8All versions (No fix recorded)
linux-oracle-6.5All versions (No fix recorded)
linux-raspi< 6.7.0-1001.1
linux-raspi-realtimeAll versions (No fix recorded)
linux-raspi2All versions (No fix recorded)
linux-realtimeAll versions (No fix recorded)
linux-riscvAll versions (No fix recorded)
linux-riscv-5.11All versions (No fix recorded)
linux-riscv-5.19All versions (No fix recorded)
linux-riscv-5.8All versions (No fix recorded)
linux-starfive-5.19All versions (No fix recorded)
linux-starfive-6.2All versions (No fix recorded)

Show all 74

Suse4 products

kernel-livepatch-SLE15-SP2_Update_44&distro=SUSE Linux Enterprise Live Patching 15 SP2< 4-150200.2.3
kernel-livepatch-SLE15-SP2_Update_45&distro=SUSE Linux Enterprise Live Patching 15 SP2< 3-150200.2.3
kernel-livepatch-SLE15-SP3_Update_40&distro=SUSE Linux Enterprise Live Patching 15 SP3< 4-150300.2.3
kernel-livepatch-SLE15-SP3_Update_41&distro=SUSE Linux Enterprise Live Patching 15 SP3< 3-150300.2.3

Debian1 product