{"id":"CVE-2023-0590","title":"A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem","summary":"A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. If patch ebda44da44f6 (\"net: sched: fix race condition in qdisc_graft()\") not …","severity":"medium","cvss":4.7,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-416","CWE-416"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel < 6.1","linux_kernel = 6.1"],"patched":["linux_kernel 6.1"],"published":"2023-03-23","updated":"2026-10-14","sourceUpdated":"2026-10-14T21:17:14.087","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-0590","references":[{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html","label":"secalert@redhat.com"},{"url":"https://lore.kernel.org/all/20221018203258.2793282-1-edumazet%40google.com/","label":"secalert@redhat.com"},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lore.kernel.org/all/20221018203258.2793282-1-edumazet%40google.com/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-806742.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd"],"epss":0.00198,"epssPercentile":0.08956,"ingestedAt":"2026-10-14T21:57:04.731Z","slug":"CVE-2023-0590","body":"## Overview\n\nA use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. If patch ebda44da44f6 (\"net: sched: fix race condition in qdisc_graft()\") not applied yet, then kernel could be affected.\n\n## Affected\n\n- `linux_kernel < 6.1`\n- `linux_kernel = 6.1`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.1`","depth":"sunlit","depthScore":26,"depthScoreParts":{"impact":25.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}