CVE-2023-53204 (GCVE-0-2023-53204)

Vulnerability from cvelistv5 – Published: 2025-09-15 14:21 – Updated: 2026-05-11 19:40
VLAI?
Title
af_unix: Fix data-races around user->unix_inflight.
Summary
In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data-races around user->unix_inflight. user->unix_inflight is changed under spin_lock(unix_gc_lock), but too_many_unix_fds() reads it locklessly. Let's annotate the write/read accesses to user->unix_inflight. BUG: KCSAN: data-race in unix_attach_fds / unix_inflight write to 0xffffffff8546f2d0 of 8 bytes by task 44798 on cpu 1: unix_inflight+0x157/0x180 net/unix/scm.c:66 unix_attach_fds+0x147/0x1e0 net/unix/scm.c:123 unix_scm_to_skb net/unix/af_unix.c:1827 [inline] unix_dgram_sendmsg+0x46a/0x14f0 net/unix/af_unix.c:1950 unix_seqpacket_sendmsg net/unix/af_unix.c:2308 [inline] unix_seqpacket_sendmsg+0xba/0x130 net/unix/af_unix.c:2292 sock_sendmsg_nosec net/socket.c:725 [inline] sock_sendmsg+0x148/0x160 net/socket.c:748 ____sys_sendmsg+0x4e4/0x610 net/socket.c:2494 ___sys_sendmsg+0xc6/0x140 net/socket.c:2548 __sys_sendmsg+0x94/0x140 net/socket.c:2577 __do_sys_sendmsg net/socket.c:2586 [inline] __se_sys_sendmsg net/socket.c:2584 [inline] __x64_sys_sendmsg+0x45/0x50 net/socket.c:2584 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 read to 0xffffffff8546f2d0 of 8 bytes by task 44814 on cpu 0: too_many_unix_fds net/unix/scm.c:101 [inline] unix_attach_fds+0x54/0x1e0 net/unix/scm.c:110 unix_scm_to_skb net/unix/af_unix.c:1827 [inline] unix_dgram_sendmsg+0x46a/0x14f0 net/unix/af_unix.c:1950 unix_seqpacket_sendmsg net/unix/af_unix.c:2308 [inline] unix_seqpacket_sendmsg+0xba/0x130 net/unix/af_unix.c:2292 sock_sendmsg_nosec net/socket.c:725 [inline] sock_sendmsg+0x148/0x160 net/socket.c:748 ____sys_sendmsg+0x4e4/0x610 net/socket.c:2494 ___sys_sendmsg+0xc6/0x140 net/socket.c:2548 __sys_sendmsg+0x94/0x140 net/socket.c:2577 __do_sys_sendmsg net/socket.c:2586 [inline] __se_sys_sendmsg net/socket.c:2584 [inline] __x64_sys_sendmsg+0x45/0x50 net/socket.c:2584 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 value changed: 0x000000000000000c -> 0x000000000000000d Reported by Kernel Concurrency Sanitizer on: CPU: 0 PID: 44814 Comm: systemd-coredum Not tainted 6.4.0-11989-g6843306689af #6 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014
Severity ?
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: 712f4aad406bb1ed67f3f98d04c044191f0ff593 , < df97b5ea9f3ac9308c3a633524dab382cd59d9e5 (git)
Affected: 712f4aad406bb1ed67f3f98d04c044191f0ff593 , < 03d133dfbcec9d439729cc64706c7eb6d1663a24 (git)
Affected: 712f4aad406bb1ed67f3f98d04c044191f0ff593 , < adcf4e069358cdee8593663650ea447215a1c49e (git)
Affected: 712f4aad406bb1ed67f3f98d04c044191f0ff593 , < b401d7e485b0a234cf8fe9a6ae99dbcd20863138 (git)
Affected: 712f4aad406bb1ed67f3f98d04c044191f0ff593 , < 9151ed4b006125cba7c06c79df504340ea4e9386 (git)
Affected: 712f4aad406bb1ed67f3f98d04c044191f0ff593 , < b9cdbb38e030fc2fe97fe27b54cbb6b4fbff250f (git)
Affected: 712f4aad406bb1ed67f3f98d04c044191f0ff593 , < ac92f239a079678a035c0faad9089354a874aede (git)
Affected: 712f4aad406bb1ed67f3f98d04c044191f0ff593 , < 0bc36c0650b21df36fbec8136add83936eaf0607 (git)
Affected: a5a6cf8c405e826ff7ed1308dde72560c0ed4854 (git)
Affected: df87da0783c4492b944badfea9d5c3c56b834697 (git)
Affected: 3d024dcef2548028e9f9b7876a544e6e0af00175 (git)
Affected: aa51d1c24ec3b6605f7cc7ef500c96cd71d7ef90 (git)
Affected: a5b9e44af8d3edaf49d14a91cc519a9fba439e67 (git)
Affected: dc6b0ec667f67d4768e72c1b7f1bbc14ea52379c (git)
Affected: 9b8b611fe0f86f07a4ff4a5f3bcb0ea7ceb7da3b (git)
Affected: 5e226f9689d90ad8ab21b4a969ae3058777f0aff (git)
Create a notification for this product.
Linux Linux Affected: 4.5
Unaffected: 0 , < 4.5 (semver)
Unaffected: 4.14.326 , ≤ 4.14.* (semver)
Unaffected: 4.19.295 , ≤ 4.19.* (semver)
Unaffected: 5.4.257 , ≤ 5.4.* (semver)
Unaffected: 5.10.195 , ≤ 5.10.* (semver)
Unaffected: 5.15.132 , ≤ 5.15.* (semver)
Unaffected: 6.1.54 , ≤ 6.1.* (semver)
Unaffected: 6.5.4 , ≤ 6.5.* (semver)
Unaffected: 6.6 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/unix/scm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "df97b5ea9f3ac9308c3a633524dab382cd59d9e5",
              "status": "affected",
              "version": "712f4aad406bb1ed67f3f98d04c044191f0ff593",
              "versionType": "git"
            },
            {
              "lessThan": "03d133dfbcec9d439729cc64706c7eb6d1663a24",
              "status": "affected",
              "version": "712f4aad406bb1ed67f3f98d04c044191f0ff593",
              "versionType": "git"
            },
            {
              "lessThan": "adcf4e069358cdee8593663650ea447215a1c49e",
              "status": "affected",
              "version": "712f4aad406bb1ed67f3f98d04c044191f0ff593",
              "versionType": "git"
            },
            {
              "lessThan": "b401d7e485b0a234cf8fe9a6ae99dbcd20863138",
              "status": "affected",
              "version": "712f4aad406bb1ed67f3f98d04c044191f0ff593",
              "versionType": "git"
            },
            {
              "lessThan": "9151ed4b006125cba7c06c79df504340ea4e9386",
              "status": "affected",
              "version": "712f4aad406bb1ed67f3f98d04c044191f0ff593",
              "versionType": "git"
            },
            {
              "lessThan": "b9cdbb38e030fc2fe97fe27b54cbb6b4fbff250f",
              "status": "affected",
              "version": "712f4aad406bb1ed67f3f98d04c044191f0ff593",
              "versionType": "git"
            },
            {
              "lessThan": "ac92f239a079678a035c0faad9089354a874aede",
              "status": "affected",
              "version": "712f4aad406bb1ed67f3f98d04c044191f0ff593",
              "versionType": "git"
            },
            {
              "lessThan": "0bc36c0650b21df36fbec8136add83936eaf0607",
              "status": "affected",
              "version": "712f4aad406bb1ed67f3f98d04c044191f0ff593",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "a5a6cf8c405e826ff7ed1308dde72560c0ed4854",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "df87da0783c4492b944badfea9d5c3c56b834697",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "3d024dcef2548028e9f9b7876a544e6e0af00175",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "aa51d1c24ec3b6605f7cc7ef500c96cd71d7ef90",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "a5b9e44af8d3edaf49d14a91cc519a9fba439e67",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "dc6b0ec667f67d4768e72c1b7f1bbc14ea52379c",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "9b8b611fe0f86f07a4ff4a5f3bcb0ea7ceb7da3b",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "5e226f9689d90ad8ab21b4a969ae3058777f0aff",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/unix/scm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.5"
            },
            {
              "lessThan": "4.5",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.326",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.295",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.257",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.195",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.132",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.54",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.6",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.326",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.295",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.257",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.195",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.132",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.54",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.4",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.2.78",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.10.96",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.12.57",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.14.60",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.18.27",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.1.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.3.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.4.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\naf_unix: Fix data-races around user-\u003eunix_inflight.\n\nuser-\u003eunix_inflight is changed under spin_lock(unix_gc_lock),\nbut too_many_unix_fds() reads it locklessly.\n\nLet\u0027s annotate the write/read accesses to user-\u003eunix_inflight.\n\nBUG: KCSAN: data-race in unix_attach_fds / unix_inflight\n\nwrite to 0xffffffff8546f2d0 of 8 bytes by task 44798 on cpu 1:\n unix_inflight+0x157/0x180 net/unix/scm.c:66\n unix_attach_fds+0x147/0x1e0 net/unix/scm.c:123\n unix_scm_to_skb net/unix/af_unix.c:1827 [inline]\n unix_dgram_sendmsg+0x46a/0x14f0 net/unix/af_unix.c:1950\n unix_seqpacket_sendmsg net/unix/af_unix.c:2308 [inline]\n unix_seqpacket_sendmsg+0xba/0x130 net/unix/af_unix.c:2292\n sock_sendmsg_nosec net/socket.c:725 [inline]\n sock_sendmsg+0x148/0x160 net/socket.c:748\n ____sys_sendmsg+0x4e4/0x610 net/socket.c:2494\n ___sys_sendmsg+0xc6/0x140 net/socket.c:2548\n __sys_sendmsg+0x94/0x140 net/socket.c:2577\n __do_sys_sendmsg net/socket.c:2586 [inline]\n __se_sys_sendmsg net/socket.c:2584 [inline]\n __x64_sys_sendmsg+0x45/0x50 net/socket.c:2584\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x6e/0xd8\n\nread to 0xffffffff8546f2d0 of 8 bytes by task 44814 on cpu 0:\n too_many_unix_fds net/unix/scm.c:101 [inline]\n unix_attach_fds+0x54/0x1e0 net/unix/scm.c:110\n unix_scm_to_skb net/unix/af_unix.c:1827 [inline]\n unix_dgram_sendmsg+0x46a/0x14f0 net/unix/af_unix.c:1950\n unix_seqpacket_sendmsg net/unix/af_unix.c:2308 [inline]\n unix_seqpacket_sendmsg+0xba/0x130 net/unix/af_unix.c:2292\n sock_sendmsg_nosec net/socket.c:725 [inline]\n sock_sendmsg+0x148/0x160 net/socket.c:748\n ____sys_sendmsg+0x4e4/0x610 net/socket.c:2494\n ___sys_sendmsg+0xc6/0x140 net/socket.c:2548\n __sys_sendmsg+0x94/0x140 net/socket.c:2577\n __do_sys_sendmsg net/socket.c:2586 [inline]\n __se_sys_sendmsg net/socket.c:2584 [inline]\n __x64_sys_sendmsg+0x45/0x50 net/socket.c:2584\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x6e/0xd8\n\nvalue changed: 0x000000000000000c -\u003e 0x000000000000000d\n\nReported by Kernel Concurrency Sanitizer on:\nCPU: 0 PID: 44814 Comm: systemd-coredum Not tainted 6.4.0-11989-g6843306689af #6\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:40:17.455Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/df97b5ea9f3ac9308c3a633524dab382cd59d9e5"
        },
        {
          "url": "https://git.kernel.org/stable/c/03d133dfbcec9d439729cc64706c7eb6d1663a24"
        },
        {
          "url": "https://git.kernel.org/stable/c/adcf4e069358cdee8593663650ea447215a1c49e"
        },
        {
          "url": "https://git.kernel.org/stable/c/b401d7e485b0a234cf8fe9a6ae99dbcd20863138"
        },
        {
          "url": "https://git.kernel.org/stable/c/9151ed4b006125cba7c06c79df504340ea4e9386"
        },
        {
          "url": "https://git.kernel.org/stable/c/b9cdbb38e030fc2fe97fe27b54cbb6b4fbff250f"
        },
        {
          "url": "https://git.kernel.org/stable/c/ac92f239a079678a035c0faad9089354a874aede"
        },
        {
          "url": "https://git.kernel.org/stable/c/0bc36c0650b21df36fbec8136add83936eaf0607"
        }
      ],
      "title": "af_unix: Fix data-races around user-\u003eunix_inflight.",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53204",
    "datePublished": "2025-09-15T14:21:32.696Z",
    "dateReserved": "2025-09-15T13:59:19.068Z",
    "dateUpdated": "2026-05-11T19:40:17.455Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-53204",
      "date": "2026-05-21",
      "epss": "0.00013",
      "percentile": "0.02396"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-53204\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-09-15T15:15:46.847\",\"lastModified\":\"2025-12-04T15:06:57.090\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\naf_unix: Fix data-races around user-\u003eunix_inflight.\\n\\nuser-\u003eunix_inflight is changed under spin_lock(unix_gc_lock),\\nbut too_many_unix_fds() reads it locklessly.\\n\\nLet\u0027s annotate the write/read accesses to user-\u003eunix_inflight.\\n\\nBUG: KCSAN: data-race in unix_attach_fds / unix_inflight\\n\\nwrite to 0xffffffff8546f2d0 of 8 bytes by task 44798 on cpu 1:\\n unix_inflight+0x157/0x180 net/unix/scm.c:66\\n unix_attach_fds+0x147/0x1e0 net/unix/scm.c:123\\n unix_scm_to_skb net/unix/af_unix.c:1827 [inline]\\n unix_dgram_sendmsg+0x46a/0x14f0 net/unix/af_unix.c:1950\\n unix_seqpacket_sendmsg net/unix/af_unix.c:2308 [inline]\\n unix_seqpacket_sendmsg+0xba/0x130 net/unix/af_unix.c:2292\\n sock_sendmsg_nosec net/socket.c:725 [inline]\\n sock_sendmsg+0x148/0x160 net/socket.c:748\\n ____sys_sendmsg+0x4e4/0x610 net/socket.c:2494\\n ___sys_sendmsg+0xc6/0x140 net/socket.c:2548\\n __sys_sendmsg+0x94/0x140 net/socket.c:2577\\n __do_sys_sendmsg net/socket.c:2586 [inline]\\n __se_sys_sendmsg net/socket.c:2584 [inline]\\n __x64_sys_sendmsg+0x45/0x50 net/socket.c:2584\\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\\n do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80\\n entry_SYSCALL_64_after_hwframe+0x6e/0xd8\\n\\nread to 0xffffffff8546f2d0 of 8 bytes by task 44814 on cpu 0:\\n too_many_unix_fds net/unix/scm.c:101 [inline]\\n unix_attach_fds+0x54/0x1e0 net/unix/scm.c:110\\n unix_scm_to_skb net/unix/af_unix.c:1827 [inline]\\n unix_dgram_sendmsg+0x46a/0x14f0 net/unix/af_unix.c:1950\\n unix_seqpacket_sendmsg net/unix/af_unix.c:2308 [inline]\\n unix_seqpacket_sendmsg+0xba/0x130 net/unix/af_unix.c:2292\\n sock_sendmsg_nosec net/socket.c:725 [inline]\\n sock_sendmsg+0x148/0x160 net/socket.c:748\\n ____sys_sendmsg+0x4e4/0x610 net/socket.c:2494\\n ___sys_sendmsg+0xc6/0x140 net/socket.c:2548\\n __sys_sendmsg+0x94/0x140 net/socket.c:2577\\n __do_sys_sendmsg net/socket.c:2586 [inline]\\n __se_sys_sendmsg net/socket.c:2584 [inline]\\n __x64_sys_sendmsg+0x45/0x50 net/socket.c:2584\\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\\n do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80\\n entry_SYSCALL_64_after_hwframe+0x6e/0xd8\\n\\nvalue changed: 0x000000000000000c -\u003e 0x000000000000000d\\n\\nReported by Kernel Concurrency Sanitizer on:\\nCPU: 0 PID: 44814 Comm: systemd-coredum Not tainted 6.4.0-11989-g6843306689af #6\\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":4.7,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.0,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-362\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.2.78\",\"versionEndExcluding\":\"3.3\",\"matchCriteriaId\":\"6E88DBF7-9C11-49CD-88B6-9AE0E5350F94\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.10.96\",\"versionEndExcluding\":\"3.11\",\"matchCriteriaId\":\"2D30AFF3-EA15-42C2-A3E0-8D98B6C41B08\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.12.57\",\"versionEndExcluding\":\"3.13\",\"matchCriteriaId\":\"891B3685-B840-4760-BEF5-B60FABCA63EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.14.60\",\"versionEndExcluding\":\"3.15\",\"matchCriteriaId\":\"5194146E-93C8-405F-8D58-440F1FF8D1F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.18.27\",\"versionEndExcluding\":\"3.19\",\"matchCriteriaId\":\"14D92A66-8C70-4279-97AA-2054416F1C44\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.1.17\",\"versionEndExcluding\":\"4.2\",\"matchCriteriaId\":\"E2E107F1-35B3-421F-8885-96D2886DA0D5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.3.5\",\"versionEndExcluding\":\"4.4\",\"matchCriteriaId\":\"10BEA0F1-FF96-4EBA-AAEA-0F6D1029A44B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.4.1\",\"versionEndExcluding\":\"4.14.326\",\"matchCriteriaId\":\"6EA8100E-C690-4C8A-9415-43903B77DF1B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.15\",\"versionEndExcluding\":\"4.19.295\",\"matchCriteriaId\":\"D419C7D6-F33D-4EF8-8950-1CB5DDF6A55D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.257\",\"matchCriteriaId\":\"834BD148-28EC-43A4-A4F5-458124A1E39F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.195\",\"matchCriteriaId\":\"C385B650-53DB-4BFB-83D1-1D8FADF653EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.132\",\"matchCriteriaId\":\"5913891D-409A-4EEC-9231-F2EF5A493BC7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.54\",\"matchCriteriaId\":\"7353B9B4-AFFC-45DE-840E-1A7D2B00E7AD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.5.4\",\"matchCriteriaId\":\"CA8C8B88-AF36-445D-A228-AD78F3615373\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/03d133dfbcec9d439729cc64706c7eb6d1663a24\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/0bc36c0650b21df36fbec8136add83936eaf0607\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9151ed4b006125cba7c06c79df504340ea4e9386\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ac92f239a079678a035c0faad9089354a874aede\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/adcf4e069358cdee8593663650ea447215a1c49e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b401d7e485b0a234cf8fe9a6ae99dbcd20863138\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b9cdbb38e030fc2fe97fe27b54cbb6b4fbff250f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/df97b5ea9f3ac9308c3a633524dab382cd59d9e5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.