CVE-2023-4622

21

FAUCET Score

CVE-2023-4622 is a use-after-free vulnerability in the Linux kernel's af_unix component, specifically affecting Debian and other Linux distributions. This flaw allows a local attacker to achieve privilege escalation due to a race condition in the unix_stream_sendpage() function. With a CVSS score of 7.0 (HIGH), exploitation requires low privileges but has high impact on confidentiality, integrity, and availability. While no active exploitation or public exploit code is currently known, and community discussion is minimal, immediate patching to commit 790c2f9d15b594350ae9bca7b236f2b1859de02c is recommended to mitigate this risk.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		>= 4.2, < 6.1.47CPE match	cpe:2.3:a:linux:kernel::::::::
		>= 4.2, < 6.1.47CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		10.0CPE matchmatch criteria	cpe:2.3:o:debian:debian_linux:10.0:::::::*
		12.0CPE matchmatch criteria	cpe:2.3:o:debian:debian_linux:12.0:::::::*

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

1.8

Impact Score

5.9

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.55%

Probability of exploitation in next 30 days

EPSS Percentile

42.7%

Percentile rank of EPSS score among Peer Group

As of 2026-07-28

Model: v2026.06.15

This CVE's current EPSS score of 0.0055 is in the 82nd percentile among its peer group of 1,525 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.4 InfoSec Media, 0.1 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (35)

microsoftpatch availablevia msrc

Product: 17834-16823Fixed in: 5.15.135.1-1

microsoftpatch availablevia msrc

Product: 18282-16823Fixed in: 5.15.131.1-2

microsoftpatch availablevia msrc

Product: cbl2 hyperv-daemons 5.15.135.1-1 on CBL Mariner 2.0Fixed in: 5.15.135.1-1

microsoftpatch availablevia msrc

Product: cbl2 kernel 5.15.131.1-2 on CBL Mariner 2.0Fixed in: 5.15.131.1-2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.7 Advanced Update SupportFixed in: kernel-0:3.10.0-1062.90.1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: kernel-rt-0:4.18.0-513.11.1.rt7.313.el8_9

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: kernel-0:4.18.0-513.11.1.el8_9

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: kernel-0:4.18.0-193.120.1.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Telecommunications Update ServiceFixed in: kernel-rt-0:4.18.0-193.120.1.rt13.171.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Telecommunications Update ServiceFixed in: kernel-0:4.18.0-193.120.1.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Update Services for SAP SolutionsFixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Update Services for SAP SolutionsFixed in: kernel-0:4.18.0-193.120.1.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: kernel-0:4.18.0-305.120.1.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: kernel-rt-0:4.18.0-305.120.1.rt7.196.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: kernel-0:4.18.0-305.120.1.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsFixed in: kernel-0:4.18.0-305.120.1.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsFixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Extended Update SupportFixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Extended Update SupportFixed in: kernel-0:4.18.0-372.87.1.el8_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Extended Update SupportFixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Extended Update SupportFixed in: kernel-0:4.18.0-477.43.1.el8_8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: kernel-0:5.14.0-362.18.1.el9_3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Extended Update SupportFixed in: kernel-0:5.14.0-70.93.2.el9_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Extended Update SupportFixed in: kernel-rt-0:5.14.0-70.93.1.rt21.165.el9_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Extended Update SupportFixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: kernel-0:5.14.0-284.48.1.el9_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: kernel-rt-0:5.14.0-284.48.1.rt14.333.el9_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Virtualization 4 for Red Hat Enterprise Linux 8Fixed in: kernel-0:4.18.0-372.87.1.el8_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: kernel-0:3.10.0-1160.118.1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: kernel-rt-0:3.10.0-1160.118.1.rt56.1269.el7

redhatno patchvia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt

Vendor Advisories (2)

microsoft2023-Sep/CVE-2023-4622Important

Use-after-free in Linux kernel's af_unix component

redhatCVE-2023-4622Important

kernel: use after free in unix_stream_sendpage

References

packetstormsecurity.com / files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html

git.kernel.org / pub/scm/linux/kernel/git/stable/linux.git/commit

Issue TrackingMailing ListPatchVendor Advisory

kernel.dance / 790c2f9d15b594350ae9bca7b236f2b1859de02c

PatchVendor Advisory

lists.debian.org / debian-lts-announce/2023/10/msg00027.html

Mailing ListThird Party Advisory

lists.debian.org / debian-lts-announce/2024/01/msg00004.html

debian.org / security/2023/dsa-5492

Third Party Advisory