๐Ÿ” CVE Alert

CVE-2023-6546

HIGH 7.0

Kernel: gsm multiplexing race condition leads to privilege escalation

CVSS Score
7.0
EPSS Score
0.0%
EPSS Percentile
0th

A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci while restarting the gsm mux. This could allow a local unprivileged user to escalate their privileges on the system.

CWE CWE-366
Vendor red hat
Product red hat enterprise linux 8
Published Dec 21, 2023
Last Updated Feb 18, 2026
Stay Ahead of the Next One

Get instant alerts for red hat red hat enterprise linux 8

Be the first to know when new high vulnerabilities affecting red hat red hat enterprise linux 8 are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected Versions

Red Hat / Red Hat Enterprise Linux 8
All versions affected
Red Hat / Red Hat Enterprise Linux 8
All versions affected
Red Hat / Red Hat Enterprise Linux 8
All versions affected
Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 8.4 Telecommunications Update Service
All versions affected
Red Hat / Red Hat Enterprise Linux 8.4 Telecommunications Update Service
All versions affected
Red Hat / Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
All versions affected
Red Hat / Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
All versions affected
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 9
All versions affected
Red Hat / Red Hat Enterprise Linux 9
All versions affected
Red Hat / Red Hat Enterprise Linux 9.0 Extended Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 9.0 Extended Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 9.0 Extended Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Support
All versions affected
Red Hat / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8
All versions affected
Red Hat / RHOL-5.7-RHEL-8
All versions affected
Red Hat / RHOL-5.7-RHEL-8
All versions affected
Red Hat / RHOL-5.7-RHEL-8
All versions affected
Red Hat / RHOL-5.7-RHEL-8
All versions affected
Red Hat / RHOL-5.7-RHEL-8
All versions affected
Red Hat / RHOL-5.7-RHEL-8
All versions affected
Red Hat / RHOL-5.7-RHEL-8
All versions affected
Red Hat / RHOL-5.7-RHEL-8
All versions affected
Red Hat / RHOL-5.7-RHEL-8
All versions affected
Red Hat / RHOL-5.7-RHEL-8
All versions affected
Red Hat / RHOL-5.7-RHEL-8
All versions affected
Red Hat / RHOL-5.7-RHEL-8
All versions affected
Red Hat / RHOL-5.7-RHEL-8
All versions affected
Red Hat / RHOL-5.7-RHEL-8
All versions affected
Red Hat / RHOL-5.7-RHEL-8
All versions affected
Red Hat / RHOL-5.7-RHEL-8
All versions affected
Red Hat / RHOL-5.7-RHEL-8
All versions affected
Red Hat / RHOL-5.7-RHEL-8
All versions affected
Red Hat / Red Hat Enterprise Linux 6
All versions affected
Red Hat / Red Hat Enterprise Linux 7
All versions affected
Red Hat / Red Hat Enterprise Linux 7
All versions affected
Red Hat / Red Hat Enterprise Linux 9
All versions affected

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
access.redhat.com: https://access.redhat.com/errata/RHSA-2024:0930 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:0937 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:1018 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:1019 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:1055 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:1250 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:1253 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:1306 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:1607 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:1612 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:1614 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:2093 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:2394 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:2621 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:2697 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:4577 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:4729 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:4731 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:4970 access.redhat.com: https://access.redhat.com/security/cve/CVE-2023-6546 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2255498 github.com: https://github.com/torvalds/linux/commit/3c4f8333b582487a2d1e02171f1465531cde53e3 zerodayinitiative.com: https://www.zerodayinitiative.com/advisories/ZDI-CAN-20527 openwall.com: http://www.openwall.com/lists/oss-security/2024/04/10/18 openwall.com: http://www.openwall.com/lists/oss-security/2024/04/10/21 openwall.com: http://www.openwall.com/lists/oss-security/2024/04/11/7 openwall.com: http://www.openwall.com/lists/oss-security/2024/04/11/9 openwall.com: http://www.openwall.com/lists/oss-security/2024/04/12/1 openwall.com: http://www.openwall.com/lists/oss-security/2024/04/12/2 openwall.com: http://www.openwall.com/lists/oss-security/2024/04/16/2 openwall.com: http://www.openwall.com/lists/oss-security/2024/04/17/1