CVE-2023-54082

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5

Description The Linux kernel contained a flaw in the unix stream sendpage() function where a null pointer dereference could occur. This issue arose from attempting to add data to the last socket buffer (skb) in the peer's receive queue without proper locking. A race condition existed where unix stream sendpage() could access an skb that was being released by garbage collection, leading to a use-after-free condition. The issue was resolved with a patch that enforces locking of the peer's receive queue within the unix stream sendpage() function.

Recommendations Update to version 6.5 or later.