CVE-2023-4622

HighCVSS 7.0/10Last modified Sep 17, 2026

Description

A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.

The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free.

We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c (or backported equivalents).

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Sep 6, 2023
Last modified
Sep 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-462209.8An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofCVE-2023-462219.8An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofCVE-2023-462229.8An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofCVE-2023-462239.8An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofCVE-2023-462249.8An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofCVE-2023-462259.8An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofCVE-2023-462269.8Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2. Users are recommended to upgCVE-2023-462277.5Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong. This issue affects Apache InLong: from 1.4.0 tCVE-2023-462287.8zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, CVE-2023-462298.8LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to anCVE-2023-46237.8A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve CVE-2023-462304.9In Splunk Add-on Builder versions below 4.1.4, the app writes sensitive information to internal log files.