CVE Database
/

CVE-2023-6546

Back to search

CVE-2023-6546

Published: Dec 21, 2023

Modified: Feb 18, 2026

PUBLISHED

CVSS v3.1

7.0

HIGH

Description

A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci while restarting the gsm mux. This could allow a local unprivileged user to escalate their privileges on the system.

VendorProductVersions

Red Hat

Red Hat Enterprise Linux 8

unaffected
0:4.18.0-513.24.1.rt7.326.el8_9 - < *

Red Hat

Red Hat Enterprise Linux 8

unaffected
0:4.18.0-513.24.1.el8_9 - < *

Red Hat

Red Hat Enterprise Linux 8

All versions

Red Hat

Red Hat Enterprise Linux 8.2 Advanced Update Support

unaffected
0:4.18.0-193.136.1.el8_2 - < *

Red Hat

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

unaffected
0:4.18.0-305.134.1.el8_4 - < *

Red Hat

Red Hat Enterprise Linux 8.4 Telecommunications Update Service

unaffected
0:4.18.0-305.134.1.rt7.210.el8_4 - < *

Red Hat

Red Hat Enterprise Linux 8.4 Telecommunications Update Service

unaffected
0:4.18.0-305.134.1.el8_4 - < *

Red Hat

Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

unaffected
0:4.18.0-305.134.1.el8_4 - < *

Red Hat

Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

All versions

Red Hat

Red Hat Enterprise Linux 8.6 Extended Update Support

unaffected
0:4.18.0-372.93.1.el8_6 - < *

Red Hat

Red Hat Enterprise Linux 8.6 Extended Update Support

All versions

Red Hat

Red Hat Enterprise Linux 8.8 Extended Update Support

unaffected
0:4.18.0-477.55.1.el8_8 - < *

Red Hat

Red Hat Enterprise Linux 8.8 Extended Update Support

All versions

Red Hat

Red Hat Enterprise Linux 9

unaffected
0:5.14.0-427.13.1.el9_4 - < *

Red Hat

Red Hat Enterprise Linux 9

unaffected
0:5.14.0-427.13.1.el9_4 - < *

Red Hat

Red Hat Enterprise Linux 9.0 Extended Update Support

unaffected
0:5.14.0-70.93.2.el9_0 - < *

Red Hat

Red Hat Enterprise Linux 9.0 Extended Update Support

unaffected
0:5.14.0-70.93.1.rt21.165.el9_0 - < *

Red Hat

Red Hat Enterprise Linux 9.0 Extended Update Support

All versions

Red Hat

Red Hat Enterprise Linux 9.2 Extended Update Support

unaffected
0:5.14.0-284.55.1.el9_2 - < *

Red Hat

Red Hat Enterprise Linux 9.2 Extended Update Support

unaffected
0:5.14.0-284.55.1.rt14.340.el9_2 - < *

Red Hat

Red Hat Enterprise Linux 9.2 Extended Update Support

All versions

Red Hat

Red Hat Virtualization 4 for Red Hat Enterprise Linux 8

unaffected
0:4.18.0-372.93.1.el8_6 - < *

Red Hat

RHOL-5.7-RHEL-8

unaffected
v5.7.13-16 - < *

Red Hat

RHOL-5.7-RHEL-8

unaffected
v5.7.13-7 - < *

Red Hat

RHOL-5.7-RHEL-8

unaffected
v6.8.1-408 - < *

Red Hat

RHOL-5.7-RHEL-8

unaffected
v5.7.13-19 - < *

Red Hat

RHOL-5.7-RHEL-8

unaffected
v1.0.0-480 - < *

Red Hat

RHOL-5.7-RHEL-8

unaffected
v5.7.13-9 - < *

Red Hat

RHOL-5.7-RHEL-8

unaffected
v0.4.0-248 - < *

Red Hat

RHOL-5.7-RHEL-8

unaffected
v1.14.6-215 - < *

Red Hat

RHOL-5.7-RHEL-8

unaffected
v6.8.1-431 - < *

Red Hat

RHOL-5.7-RHEL-8

unaffected
v1.1.0-228 - < *

Red Hat

RHOL-5.7-RHEL-8

unaffected
v5.8.1-471 - < *

Red Hat

RHOL-5.7-RHEL-8

unaffected
v2.9.6-15 - < *

Red Hat

RHOL-5.7-RHEL-8

unaffected
v5.7.13-3 - < *

Red Hat

RHOL-5.7-RHEL-8

unaffected
v5.7.13-27 - < *

Red Hat

RHOL-5.7-RHEL-8

unaffected
v5.7.13-12 - < *

Red Hat

RHOL-5.7-RHEL-8

unaffected
v0.1.0-527 - < *

Red Hat

RHOL-5.7-RHEL-8

unaffected
v0.1.0-225 - < *

Red Hat

RHOL-5.7-RHEL-8

unaffected
v0.28.1-57 - < *

Red Hat

Red Hat Enterprise Linux 6

All versions

Red Hat

Red Hat Enterprise Linux 7

All versions

Red Hat

Red Hat Enterprise Linux 7

All versions

Red Hat

Red Hat Enterprise Linux 9

All versions

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

References

RHSA-2024:0930
vendor-advisory
x_refsource_REDHAT
RHSA-2024:0937
vendor-advisory
x_refsource_REDHAT
RHSA-2024:1018
vendor-advisory
x_refsource_REDHAT
RHSA-2024:1019
vendor-advisory
x_refsource_REDHAT
RHSA-2024:1055
vendor-advisory
x_refsource_REDHAT
RHSA-2024:1250
vendor-advisory
x_refsource_REDHAT
RHSA-2024:1253
vendor-advisory
x_refsource_REDHAT
RHSA-2024:1306
vendor-advisory
x_refsource_REDHAT
RHSA-2024:1607
vendor-advisory
x_refsource_REDHAT
RHSA-2024:1612
vendor-advisory
x_refsource_REDHAT
RHSA-2024:1614
vendor-advisory
x_refsource_REDHAT
RHSA-2024:2093
vendor-advisory
x_refsource_REDHAT
RHSA-2024:2394
vendor-advisory
x_refsource_REDHAT
RHSA-2024:2621
vendor-advisory
x_refsource_REDHAT
RHSA-2024:2697
vendor-advisory
x_refsource_REDHAT
RHSA-2024:4577
vendor-advisory
x_refsource_REDHAT
RHSA-2024:4729
vendor-advisory
x_refsource_REDHAT
RHSA-2024:4731
vendor-advisory
x_refsource_REDHAT
RHSA-2024:4970
vendor-advisory
x_refsource_REDHAT
RHBZ#2255498
issue-tracking
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now