Skip to content
OpenAdvisories
High · 7.0 CVE-2023-6531 EUVD-2023-58762GHSA-xh36-8q3w-g243

Kernel: gc's deletion of an skb races with unix_stream_read_generic() leading to uaf

Published Jan 21, 2024 · Updated Nov 7, 2026 · Assigned by redhat

Vendor: Red Hat Product: Red Hat Enterprise Linux 6 Product: Red Hat Enterprise Linux 7 Product: Red Hat Enterprise Linux 8 Product: Red Hat Enterprise Linux 9 Package: kernel Package: linux Package: linux-allwinner-5.19 Package: linux-aws-5.0 Package: linux-aws-5.11 Package: linux-aws-5.13 Package: linux-aws-5.19 Package: linux-aws-5.3 Package: linux-aws-5.8 Package: linux-aws-6.2 Package: linux-aws-6.5 Package: linux-azure Package: linux-azure-5.11 Package: linux-azure-5.13 Package: linux-azure-5.19 Package: linux-azure-5.3 Package: linux-azure-5.8 Package: linux-azure-6.2 Package: linux-azure-6.5 Package: linux-azure-edge Package: linux-azure-fde Package: linux-azure-fde-5.19 Package: linux-azure-fde-6.2 Package: linux-gcp Package: linux-gcp-5.11 Package: linux-gcp-5.13 Package: linux-gcp-5.19 Package: linux-gcp-5.3 Package: linux-gcp-5.8 Package: linux-gcp-6.2 Package: linux-gcp-6.5 Package: linux-gke Package: linux-gke-4.15 Package: linux-gke-5.15 Package: linux-gke-5.4 Package: linux-gkeop-5.4 Package: linux-hwe Package: linux-hwe-5.11 Package: linux-hwe-5.13 Package: linux-hwe-5.19 Package: linux-hwe-5.8 Package: linux-hwe-6.2 Package: linux-hwe-6.5 Package: linux-hwe-edge Package: linux-intel-5.13 Package: linux-intel-iot-realtime Package: linux-lowlatency-hwe-5.19 Package: linux-lowlatency-hwe-6.2 Package: linux-lowlatency-hwe-6.5 Package: linux-nvidia-6.2 Package: linux-nvidia-6.5 Package: linux-oem Package: linux-oem-5.10 Package: linux-oem-5.13 Package: linux-oem-5.14 Package: linux-oem-5.17 Package: linux-oem-5.6 Package: linux-oem-6.0 Package: linux-oem-6.1 Package: linux-oem-6.5 Package: linux-oracle-5.0 Package: linux-oracle-5.11 Package: linux-oracle-5.13 Package: linux-oracle-5.3 Package: linux-oracle-5.8 Package: linux-oracle-6.5 Package: linux-raspi Package: linux-raspi-realtime Package: linux-raspi2 Package: linux-realtime Package: linux-riscv Package: linux-riscv-5.11 Package: linux-riscv-5.19 Package: linux-riscv-5.8 Package: linux-starfive-5.19 Package: linux-starfive-6.2 Platform: Linux Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic() on the socket that the SKB is queued on.

Affected products

VendorProductAffectedFixed
Red Hat Red Hat Enterprise Linux 9 — —
Red Hat Red Hat Enterprise Linux 6 — —
Red Hat Red Hat Enterprise Linux 7 — —
Red Hat Red Hat Enterprise Linux 8 — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 6.6.8-1 —
Debian 13 linux 6.6.8-1 —
Debian 12 linux 6.1.69-1 DSA-5593-1
Debian 11 linux 5.10.205-2 DSA-5594-1
Debian 10 linux-5.10 5.10.205-2~deb10u1 DLA-3711-1
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS linux-raspi 6.7.0-1001.1 —
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux-gcp-6.5 6.5.0-1013.13~22.04.1 —
Ubuntu 22.04 LTS linux-hwe-6.5 6.5.0-17.17~22.04.1 USN-6624-1
Ubuntu 22.04 LTS linux-lowlatency-hwe-6.5 6.5.0-17.17.1.1.1~22.04.1 USN-6624-1
Ubuntu 22.04 LTS linux-nvidia-6.5 6.5.0-1014.14 —
Ubuntu 22.04 LTS linux-oem-6.1 6.1.0-1033.33 USN-6639-1
Ubuntu 22.04 LTS linux-oem-6.5 6.5.0-1014.15 USN-6624-1
Ubuntu 22.04 LTS linux-riscv +24 No fix yet —
Ubuntu 20.04 LTS linux-gke +26 No fix yet —
Ubuntu 18.04 LTS linux-gcp +14 No fix yet —
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
ReleasePackageFixed inAdvisory
RHEL 9 bpftool 7.3.0-427.13.1.el9_4 RHSA-2024:2394
RHEL 9 rv +64 5.14.0-427.13.1.el9_4 RHSA-2024:2394

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 bpftool 7.3.0-427.13.1.el9_4 ALSA-2024:2394
AlmaLinux 9 rv +60 5.14.0-427.13.1.el9_4 ALSA-2024:2394
ReleasePackageFixed inAdvisory
SLES 15 SP6 kernel-azure +1 6.4.0-150600.8.5.4 SUSE-SU-2024:2135-1
SLES 15 SP6 kernel-syms-azure 6.4.0-150600.8.5.1 SUSE-SU-2024:2135-1
SLES 15 SP5 kernel-64kb +6 5.14.21-150500.55.44.1 SUSE-SU-2024:2190-1, SUSE-SU-2024:0516-1, SUSE-SU-2024:0160-1
SLES 15 SP5 kernel-azure +2 5.14.21-150500.33.29.1 SUSE-SU-2024:2019-1, SUSE-SU-2024:0514-1, SUSE-SU-2024:0141-1
SLES 15 SP5 kernel-default-base 5.14.21-150500.55.44.1.150500.6.19.2 SUSE-SU-2024:2190-1, SUSE-SU-2024:0516-1, SUSE-SU-2024:0160-1
SLES 15 SP4 kernel-64kb +6 5.14.21-150400.24.103.1 SUSE-SU-2024:2189-1, SUSE-SU-2024:0156-1
SLES 15 SP4 kernel-default-base 5.14.21-150400.24.103.1.150400.24.48.1 SUSE-SU-2024:2189-1, SUSE-SU-2024:0156-1
SLES 15 SP3 kernel-64kb +7 5.3.18-150300.59.158.1 SUSE-SU-2024:2185-1, SUSE-SU-2024:1489-1
SLES 15 SP3 kernel-default-base 5.3.18-150300.59.158.1.150300.18.92.5 SUSE-SU-2024:2185-1, SUSE-SU-2024:1489-1
SLES 15 SP2 kernel-default-base 5.3.18-150200.24.188.1.150200.9.95.3 SUSE-SU-2024:2183-1, SUSE-SU-2024:1454-1
SLES 15 SP2 kernel-docs +5 5.3.18-150200.24.188.1 SUSE-SU-2024:2183-1, SUSE-SU-2024:1454-1
Show 21 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 15 SP4 kernel-default-base 5.14.21-150400.24.103.1.150400.24.48.1 SUSE-SU-2024:2189-1, SUSE-SU-2024:0156-1
SLES for SAP 15 SP4 kernel-docs +4 5.14.21-150400.24.103.1 SUSE-SU-2024:2189-1, SUSE-SU-2024:0156-1
SLES for SAP 15 SP3 kernel-default-base 5.3.18-150300.59.158.1.150300.18.92.5 SUSE-SU-2024:2185-1, SUSE-SU-2024:1489-1
SLES for SAP 15 SP3 kernel-docs +5 5.3.18-150300.59.158.1 SUSE-SU-2024:2185-1, SUSE-SU-2024:1489-1
SLES for SAP 15 SP2 kernel-default-base 5.3.18-150200.24.188.1.150200.9.95.3 SUSE-SU-2024:2183-1, SUSE-SU-2024:1454-1
SLES for SAP 15 SP2 kernel-docs +5 5.3.18-150200.24.188.1 SUSE-SU-2024:2183-1, SUSE-SU-2024:1454-1
SLE Real Time 15 SP4 kernel-default-base 5.14.21-150400.24.103.1.150400.24.48.1 SUSE-SU-2024:0156-1
SLE Real Time 15 SP4 kernel-docs +4 5.14.21-150400.24.103.1 SUSE-SU-2024:0156-1
SLE Micro 5.5 kernel-default 5.14.21-150500.55.44.1 SUSE-SU-2024:2190-1, SUSE-SU-2024:0516-1, SUSE-SU-2024:0160-1
SLE Micro 5.5 kernel-default-base 5.14.21-150500.55.44.1.150500.6.19.2 SUSE-SU-2024:2190-1, SUSE-SU-2024:0516-1, SUSE-SU-2024:0160-1
SLE Micro 5.5 kernel-rt 5.14.21-150500.13.30.1 SUSE-SU-2024:2008-1, SUSE-SU-2024:0469-1, SUSE-SU-2024:0115-1
SLE Micro 5.5 kernel-source-rt 5.14.21-150500.13.58.1 SUSE-SU-2024:2008-1
SLE Micro 5.4 kernel-default 5.14.21-150400.24.103.1 SUSE-SU-2024:2189-1, SUSE-SU-2024:0156-1
SLE Micro 5.4 kernel-default-base 5.14.21-150400.24.103.1.150400.24.48.1 SUSE-SU-2024:2189-1, SUSE-SU-2024:0156-1
SLE Micro 5.4 kernel-rt 5.14.21-150400.15.65.1 SUSE-SU-2025:0231-1, SUSE-SU-2024:0129-1
SLE Micro 5.4 kernel-source-rt 5.14.21-150400.15.106.1 SUSE-SU-2025:0231-1
SLE Micro 5.3 kernel-default 5.14.21-150400.24.103.1 SUSE-SU-2024:2189-1, SUSE-SU-2024:0156-1
SLE Micro 5.3 kernel-default-base 5.14.21-150400.24.103.1.150400.24.48.1 SUSE-SU-2024:2189-1, SUSE-SU-2024:0156-1
SLE Micro 5.3 kernel-rt 5.14.21-150400.15.65.1 SUSE-SU-2025:0231-1, SUSE-SU-2024:0129-1
SLE Micro 5.3 kernel-source-rt 5.14.21-150400.15.106.1 SUSE-SU-2025:0231-1
SLE Micro 5.2 kernel-default 5.3.18-150300.59.158.1 SUSE-SU-2024:2185-1, SUSE-SU-2024:1489-1
SLE Micro 5.2 kernel-default-base 5.3.18-150300.59.158.1.150300.18.92.5 SUSE-SU-2024:2185-1, SUSE-SU-2024:1489-1
SLE Micro 5.2 kernel-rt +1 5.3.18-150300.166.1 SUSE-SU-2025:01995-1, SUSE-SU-2024:2010-1, SUSE-SU-2024:1465-1
SLE Micro 5.1 kernel-default 5.3.18-150300.59.158.1 SUSE-SU-2024:2185-1, SUSE-SU-2024:1489-1
SLE Micro 5.1 kernel-default-base 5.3.18-150300.59.158.1.150300.18.92.5 SUSE-SU-2024:2185-1, SUSE-SU-2024:1489-1
SLE Micro 5.1 kernel-rt +1 5.3.18-150300.166.1 SUSE-SU-2025:01995-1, SUSE-SU-2024:2010-1, SUSE-SU-2024:1465-1
SLE Live Patching 15 SP5 kernel-default 5.14.21-150500.55.44.1 SUSE-SU-2024:2190-1, SUSE-SU-2024:0516-1, SUSE-SU-2024:0160-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5-RT_Update_1 8-150500.2.2 SUSE-SU-2024:0995-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5-RT_Update_5 6-150500.2.2 SUSE-SU-2024:0986-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5-RT_Update_7 5-150500.2.2 SUSE-SU-2024:0989-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5-RT_Update_8 4-150500.2.2 SUSE-SU-2024:0991-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_0 +1 9-150500.6.2 SUSE-SU-2024:1097-1, SUSE-SU-2024:1039-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_15 +2 1-150500.11.3.1 SUSE-SU-2024:2190-1, SUSE-SU-2024:2008-1, SUSE-SU-2024:0115-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_2 8-150500.2.3 SUSE-SU-2024:1023-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_5 6-150500.2.3 SUSE-SU-2024:1045-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_7 4-150500.2.3 SUSE-SU-2024:1040-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_9 +2 1-150500.11.5.1 SUSE-SU-2024:0516-1, SUSE-SU-2024:0469-1, SUSE-SU-2024:0160-1
SLE Live Patching 15 SP4 kernel-default 5.14.21-150400.24.103.1 SUSE-SU-2024:2189-1, SUSE-SU-2024:0156-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4-RT_Update_17 1-150400.1.3.1 SUSE-SU-2024:0129-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_11 11-150400.2.3 SUSE-SU-2024:1063-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_20 4-150400.2.3 SUSE-SU-2024:1072-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_22 1-150400.9.3.1 SUSE-SU-2024:0156-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_27 1-150400.9.3.2 SUSE-SU-2024:2189-1
SLE Live Patching 15 SP3 kernel-default 5.3.18-150300.59.158.1 SUSE-SU-2024:2185-1, SUSE-SU-2024:1489-1
SLE Live Patching 15 SP3 kernel-livepatch-SLE15-SP3_Update_31 11-150300.2.3 SUSE-SU-2024:1047-1
SLE Live Patching 15 SP3 kernel-livepatch-SLE15-SP3_Update_33 9-150300.2.3 SUSE-SU-2024:1017-1
SLE Live Patching 15 SP3 kernel-livepatch-SLE15-SP3_Update_40 4-150300.2.3 SUSE-SU-2024:1033-1
SLE Live Patching 15 SP3 kernel-livepatch-SLE15-SP3_Update_41 3-150300.2.3 SUSE-SU-2024:1054-1
SLE Live Patching 15 SP3 kernel-livepatch-SLE15-SP3_Update_42 2-150300.7.6.1 SUSE-SU-2025:0244-1, SUSE-SU-2025:0101-1, SUSE-SU-2024:4256-1
SLE Live Patching 15 SP3 kernel-livepatch-SLE15-SP3_Update_43 1-150300.7.3.5 SUSE-SU-2024:1489-1
SLE Live Patching 15 SP3 kernel-livepatch-SLE15-SP3_Update_45 1-150300.7.3.1 SUSE-SU-2024:2185-1
SLE Live Patching 15 SP2 kernel-default 5.3.18-150200.24.188.1 SUSE-SU-2024:2183-1, SUSE-SU-2024:1454-1
SLE Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_35 11-150200.2.3 SUSE-SU-2024:1047-1
SLE Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_39 7-150200.2.3 SUSE-SU-2024:1017-1
SLE Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_43 +1 4-150200.2.3 SUSE-SU-2024:1054-1, SUSE-SU-2024:1053-1
SLE Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_45 3-150200.2.3 SUSE-SU-2024:1033-1
SLE Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_46 2-150200.5.6.1 SUSE-SU-2024:4242-1, SUSE-SU-2024:3803-1, SUSE-SU-2024:3642-1
SLE Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_47 1-150200.5.3.3 SUSE-SU-2024:1454-1
SLE Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_49 1-150200.5.3.1 SUSE-SU-2024:2183-1
SLE HPC 15 SP4 kernel-64kb +5 5.14.21-150400.24.103.1 SUSE-SU-2024:2189-1, SUSE-SU-2024:0156-1
SLE HPC 15 SP4 kernel-default-base 5.14.21-150400.24.103.1.150400.24.48.1 SUSE-SU-2024:2189-1, SUSE-SU-2024:0156-1
SLE HPC 15 SP3 kernel-64kb +6 5.3.18-150300.59.158.1 SUSE-SU-2024:2185-1, SUSE-SU-2024:1489-1
SLE HPC 15 SP3 kernel-default-base 5.3.18-150300.59.158.1.150300.18.92.5 SUSE-SU-2024:2185-1, SUSE-SU-2024:1489-1
SLE HPC 15 SP2 kernel-default-base 5.3.18-150200.24.188.1.150200.9.95.3 SUSE-SU-2024:2183-1, SUSE-SU-2024:1454-1
SLE HPC 15 SP2 kernel-docs +5 5.3.18-150200.24.188.1 SUSE-SU-2024:2183-1, SUSE-SU-2024:1454-1
SUSE Real Time Module 15 SP5 kernel-rt +3 5.14.21-150500.13.30.1 SUSE-SU-2024:2008-1, SUSE-SU-2024:0469-1, SUSE-SU-2024:0115-1
SUSE Real Time Module 15 SP4 kernel-rt +3 5.14.21-150400.15.65.1 SUSE-SU-2024:0129-1
SUSE Manager Server 4.3 kernel-default-base 5.14.21-150400.24.103.1.150400.24.48.1 SUSE-SU-2024:2189-1, SUSE-SU-2024:0156-1
SUSE Manager Server 4.3 kernel-source +2 5.14.21-150400.24.103.1 SUSE-SU-2024:2189-1, SUSE-SU-2024:0156-1
SUSE Manager Server 4.3 kernel-syms 5.14.21-150400.24.122.1 SUSE-SU-2024:2189-1
SUSE Manager Proxy 4.3 kernel-default-base 5.14.21-150400.24.103.1.150400.24.48.1 SUSE-SU-2024:2189-1, SUSE-SU-2024:0156-1
SUSE Manager Proxy 4.3 kernel-source +1 5.14.21-150400.24.103.1 SUSE-SU-2024:2189-1, SUSE-SU-2024:0156-1
SUSE Manager Proxy 4.3 kernel-syms 5.14.21-150400.24.122.1 SUSE-SU-2024:2189-1
SUSE Enterprise Storage 7.1 kernel-64kb +6 5.3.18-150300.59.158.1 SUSE-SU-2024:2185-1, SUSE-SU-2024:1489-1
SUSE Enterprise Storage 7.1 kernel-default-base 5.3.18-150300.59.158.1.150300.18.92.5 SUSE-SU-2024:2185-1, SUSE-SU-2024:1489-1
ReleasePackageFixed inAdvisory
openSUSE Leap 15.6 kernel-azure +1 6.4.0-150600.8.5.4 SUSE-SU-2024:2135-1
openSUSE Leap 15.6 kernel-syms-azure 6.4.0-150600.8.5.1 SUSE-SU-2024:2135-1
openSUSE Leap 15.5 dtb-aarch64 +10 5.14.21-150500.55.44.1 SUSE-SU-2024:2190-1, SUSE-SU-2024:0516-1, SUSE-SU-2024:0160-1
openSUSE Leap 15.5 kernel-azure +2 5.14.21-150500.33.29.1 SUSE-SU-2024:2019-1, SUSE-SU-2024:0514-1, SUSE-SU-2024:0141-1
openSUSE Leap 15.5 kernel-default-base 5.14.21-150500.55.44.1.150500.6.19.2 SUSE-SU-2024:2190-1, SUSE-SU-2024:0516-1, SUSE-SU-2024:0160-1
openSUSE Leap 15.5 kernel-rt +3 5.14.21-150500.13.30.1 SUSE-SU-2024:2008-1, SUSE-SU-2024:0469-1, SUSE-SU-2024:0115-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
openSUSE Leap Micro 5.4 kernel-default 5.14.21-150400.24.103.1 SUSE-SU-2024:2189-1, SUSE-SU-2024:0156-1
openSUSE Leap Micro 5.4 kernel-default-base 5.14.21-150400.24.103.1.150400.24.48.1 SUSE-SU-2024:2189-1, SUSE-SU-2024:0156-1
openSUSE Leap Micro 5.4 kernel-rt 5.14.21-150400.15.65.1 SUSE-SU-2024:0129-1
openSUSE Leap Micro 5.3 kernel-default 5.14.21-150400.24.103.1 SUSE-SU-2024:2189-1, SUSE-SU-2024:0156-1
openSUSE Leap Micro 5.3 kernel-default-base 5.14.21-150400.24.103.1.150400.24.48.1 SUSE-SU-2024:2189-1, SUSE-SU-2024:0156-1
openSUSE Leap Micro 5.3 kernel-rt 5.14.21-150400.15.65.1 SUSE-SU-2024:0129-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 kernel-livepatch-6.1.72-96.166 1.0-0.amzn2023 ALAS2023-2024-488
Amazon Linux 2023 perf +14 6.1.72-96.166.amzn2023 ALAS2023-2024-488

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 kernel 6.6.35.1-4 —
Azure Linux 2 (CBL-Mariner) kernel 5.15.148.2-2 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 bpftool 7.3.0-427.13.1.el9_4 ELSA-2024-2394
Oracle Linux 9 rv +27 5.14.0-427.13.1.el9_4 ELSA-2024-2394

Advisories 50

References