{"id":"CVE-2023-6531","details":"A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic() on the socket that the SKB is queued on.","modified":"2026-03-13T07:48:41.622314Z","published":"2024-01-21T10:15:07.967Z","related":["ALSA-2024:2394","SUSE-SU-2024:0115-1","SUSE-SU-2024:0129-1","SUSE-SU-2024:0141-1","SUSE-SU-2024:0156-1","SUSE-SU-2024:0160-1","SUSE-SU-2024:0469-1","SUSE-SU-2024:0514-1","SUSE-SU-2024:0516-1","SUSE-SU-2024:0986-1","SUSE-SU-2024:0989-1","SUSE-SU-2024:0991-1","SUSE-SU-2024:0995-1","SUSE-SU-2024:1017-1","SUSE-SU-2024:1023-1","SUSE-SU-2024:1033-1","SUSE-SU-2024:1039-1","SUSE-SU-2024:1040-1","SUSE-SU-2024:1045-1","SUSE-SU-2024:1047-1","SUSE-SU-2024:1053-1","SUSE-SU-2024:1054-1","SUSE-SU-2024:1063-1","SUSE-SU-2024:1072-1","SUSE-SU-2024:1097-1","SUSE-SU-2024:1276-1","SUSE-SU-2024:1454-1","SUSE-SU-2024:1465-1","SUSE-SU-2024:1489-1","SUSE-SU-2024:1708-1","SUSE-SU-2024:1719-1","SUSE-SU-2024:2008-1","SUSE-SU-2024:2010-1","SUSE-SU-2024:2019-1","SUSE-SU-2024:2120-1","SUSE-SU-2024:2135-1","SUSE-SU-2024:2148-1","SUSE-SU-2024:2183-1","SUSE-SU-2024:2185-1","SUSE-SU-2024:2189-1","SUSE-SU-2024:2190-1","SUSE-SU-2024:2343-1","SUSE-SU-2024:2373-1","SUSE-SU-2024:2740-1","SUSE-SU-2024:2755-1","SUSE-SU-2024:3034-1","SUSE-SU-2024:3043-1","SUSE-SU-2024:3642-1","SUSE-SU-2024:3651-1","SUSE-SU-2024:3798-1","SUSE-SU-2024:3803-1","SUSE-SU-2024:4242-1","SUSE-SU-2024:4256-1","SUSE-SU-2025:0101-1","SUSE-SU-2025:01995-1","SUSE-SU-2025:0231-1","SUSE-SU-2025:0244-1","USN-6652-1"],"references":[{"type":"WEB","url":"http://packetstormsecurity.com/files/176533/Linux-Broken-Unix-GC-Interaction-Use-After-Free.html"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2024:2394"},{"type":"ADVISORY","url":"https://access.redhat.com/security/cve/CVE-2023-6531"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253034"},{"type":"FIX","url":"https://lore.kernel.org/all/c716c88321939156909cfa1bd8b0faaf1c804103.1701868795.git.asml.silence@gmail.com/"}],"affected":[{"database_specific":{"unresolved_ranges":[{"events":[{"introduced":"0"},{"fixed":"6.7"}]},{"events":[{"introduced":"0"},{"last_affected":"6.7-rc1"}]},{"events":[{"introduced":"0"},{"last_affected":"6.7-rc2"}]},{"events":[{"introduced":"0"},{"last_affected":"6.7-rc3"}]},{"events":[{"introduced":"0"},{"last_affected":"6.7-rc4"}]},{"events":[{"introduced":"0"},{"last_affected":"9.0"}]}],"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-6531.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}