PT-2025-52963 · Linux · Linux Kernel
CVE-2023-54006
·
Publicado
2025-12-24
·
Atualizado
2026-03-24
Nenhuma
Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.4.0-rc5-01219-gfa0e21fa4443
Description
The Linux kernel contained a data race condition related to the
unix tot inflight variable within the af unix subsystem. Specifically, unix tot inflight was being modified under a spin lock (unix gc lock), while being read locklessly by the unix release sock() function. This condition was identified by the Kernel Concurrency Sanitizer (KCSAN) and addressed by using READ ONCE() for unix tot inflight. The issue was observed during operations involving unix inflight, unix release sock, unix attach fds, unix dgram sendmsg, sock sendmsg, and system calls like sendmsg. The data race occurred when writing to memory location 0xffffffff871852b8 and reading from the same location.Recommendations
Update to version 6.4.0-rc5-01219-gfa0e21fa4443 or a later version to resolve this issue.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linux Kernel