CVE-2023-53469

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5

Description The Linux kernel contains a flaw in the unix stream sendpage() function related to a null pointer dereference. This issue occurs when handling sockets in a specific loop scenario involving garbage collection, potentially leading to a use-after-free condition. The problem was addressed by locking the peer's receive queue within the unix stream sendpage() function.

Recommendations Update to version 6.5 or later.