CVE-2023-6546

HighCVSS 7.0/10Last modified Nov 4, 2026

Description

A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci while restarting the gsm mux. This could allow a local unprivileged user to escalate their privileges on the system.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-366CWE-362

Affected software

VendorProductVersions
Red HatRed Hat Enterprise Linux 8—
Red HatRed Hat Enterprise Linux 8—
Red HatRed Hat Enterprise Linux 8—
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support—
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support—
Red HatRed Hat Enterprise Linux 8.4 Telecommunications Update Service—
Red HatRed Hat Enterprise Linux 8.4 Telecommunications Update Service—
Red HatRed Hat Enterprise Linux 8.4 Update Services for SAP Solutions—
Red HatRed Hat Enterprise Linux 8.4 Update Services for SAP Solutions—
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support—
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support—
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support—
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support—
Red HatRed Hat Enterprise Linux 9—
Red HatRed Hat Enterprise Linux 9—
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support—
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support—
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support—
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support—
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support—
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support—
Red HatRed Hat Virtualization 4 for Red Hat Enterprise Linux 8—
Red HatRHOL-5.7-RHEL-8—
Red HatRHOL-5.7-RHEL-8—
Red HatRHOL-5.7-RHEL-8—
Red HatRHOL-5.7-RHEL-8—
Red HatRHOL-5.7-RHEL-8—
Red HatRHOL-5.7-RHEL-8—
Red HatRHOL-5.7-RHEL-8—
Red HatRHOL-5.7-RHEL-8—
Red HatRHOL-5.7-RHEL-8—
Red HatRHOL-5.7-RHEL-8—
Red HatRHOL-5.7-RHEL-8—
Red HatRHOL-5.7-RHEL-8—
Red HatRHOL-5.7-RHEL-8—
Red HatRHOL-5.7-RHEL-8—
Red HatRHOL-5.7-RHEL-8—
Red HatRHOL-5.7-RHEL-8—
Red HatRHOL-5.7-RHEL-8—
Red HatRHOL-5.7-RHEL-8—
Red HatRed Hat Enterprise Linux 6—
Red HatRed Hat Enterprise Linux 7—
Red HatRed Hat Enterprise Linux 7—
Red HatRed Hat Enterprise Linux 9—

References

Timeline

Published
Dec 21, 2023
Last modified
Nov 4, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-65475.4Mattermost fails to validate team membership when a user attempts to access a playbook, allowing a user with permissions to a playbook but nCVE-2023-65488.8Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLICVE-2023-65497.5Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated DenialCVE-2023-65515.4As a simple library, class.upload.php does not perform an in-depth check on uploaded files, allowing a stored XSS vulnerability when the defCVE-2023-65526.1Lack of "current" GET parameter validation during the action of changing a language leads to an open redirect vulnerability.CVE-2023-65539.8The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the /includCVE-2023-65546.5When access to the "admin" folder is not protected by some external authorization mechanisms e.g. Apache Basic Auth, it is possible for any CVE-2023-65556.1The Email Subscription Popup WordPress plugin before 1.2.20 does not sanitise and escape a parameter before outputting it back in the page, CVE-2023-65565.4The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via currency optiCVE-2023-65575.3The The Events Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.2.8.2 vCVE-2023-65587.2The Export and Import Users and Customers plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validatCVE-2023-65599.8The MW WP Form plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 5.0.3. This is due to the
CVE-2023-6546: High severity, CVSS 7.0 | Vulnix