Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2023-6531

18
FAUCET Score

CVE-2023-6531 is a high-severity use-after-free vulnerability in the Linux Kernel, affecting various Linux distributions including Red Hat Enterprise Linux. This flaw stems from a race condition in the Unix garbage collector, potentially allowing a local, low-privileged attacker to achieve high impact on confidentiality, integrity, and availability. Despite its severity, there is currently no public exploit code available, it is not listed on the KEV catalog, and it has garnered minimal community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
< 6.7CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
6.7CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*
6.7CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:*
6.7CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:6.7:rc3:*:*:*:*:*:*
6.7CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:6.7:rc4:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.0HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.0
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.22%
Probability of exploitation in next 30 days
EPSS Percentile
13.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0022 is in the 40th percentile among its peer group of 1,525 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.4 InfoSec Media, 0.1 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (11)

microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.92.2-1 on Azure Linux 3.0Fixed in: 6.6.35.1-4
microsoftpatch availablevia msrc
Product: cbl2 kernel 5.15.148.2-2 on CBL Mariner 2.0Fixed in: 5.15.148.2-2
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.35.1-4 on Azure Linux 3.0Fixed in: 6.6.35.1-4
microsoftpatch availablevia msrc
Product: 19673-17086Fixed in: 5.15.148.2-2
microsoftpatch availablevia msrc
Product: 16960-16823Fixed in: 5.15.148.2-2
microsoftpatch availablevia msrc
Product: 17095-17086Fixed in: 5.15.148.2-2
microsoftpatch availablevia msrc
Product: 17065-17084Fixed in: 6.6.35.1-4
microsoftpatch availablevia msrc
Product: 19529-17084Fixed in: 6.6.35.1-4
microsoftpatch availablevia msrc
Product: cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0Fixed in: 5.15.148.2-2
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-0:5.14.0-427.13.1.el9_4
View patch
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt

Vendor Advisories (2)

microsoft2024-Jan/CVE-2023-6531

Kernel: gc's deletion of an skb races with unix_stream_read_generic() leading to uaf

Jan 9, 2024
redhatCVE-2023-6531Moderate

kernel: GC's deletion of an SKB races with unix_stream_read_generic() leading to UAF

Dec 6, 2023

References

packetstormsecurity.com / files/176533/Linux-Broken-Unix-GC-Interaction-Use-After-Free.html
lists.debian.org / debian-lts-announce/2024/01/msg00005.html
access.redhat.com / errata/RHSA-2024:2394
access.redhat.com / security/cve/CVE-2023-6531
Third Party Advisory
bugzilla.redhat.com / show_bug.cgi
Issue Tracking
lore.kernel.org / all/c716c88321939156909cfa1bd8b0faaf1c804103.1701868795.git.asml.silence@gmail.com
Mailing ListPatch