{"id":"CVE-2023-4622","title":"A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.\n\n\n\nThe unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without lock…","summary":"A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.\n\n\n\nThe unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without lock…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 4.2, < 4.14.324","linux_kernel >= 4.15, < 4.19.293","linux_kernel >= 4.20, < 5.4.255","linux_kernel >= 5.5, < 5.10.192","linux_kernel >= 5.11, < 5.15.128","linux_kernel >= 5.16, < 6.1.47","linux_kernel >= 6.2, < 6.4.12","debian_linux = 10.0","debian_linux = 12.0"],"patched":["linux_kernel 6.4.12"],"published":"2023-09-06","updated":"2026-09-17","sourceUpdated":"2026-09-17T20:16:47.693","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-4622","references":[{"url":"http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html","label":"cve-coordination@google.com"},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-6.1.y&id=790c2f9d15b594350ae9bca7b236f2b1859de02c","label":"cve-coordination@google.com"},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4821df2ffe38d629170edc266e65fa05970e0745","label":"cve-coordination@google.com"},{"url":"https://kernel.dance/790c2f9d15b594350ae9bca7b236f2b1859de02c","label":"cve-coordination@google.com"},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","label":"cve-coordination@google.com"},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html","label":"cve-coordination@google.com"},{"url":"https://www.debian.org/security/2023/dsa-5492","label":"cve-coordination@google.com"},{"url":"http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-6.1.y&id=790c2f9d15b594350ae9bca7b236f2b1859de02c","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kernel.dance/790c2f9d15b594350ae9bca7b236f2b1859de02c","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2023/dsa-5492","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","cve.org","exploit-available"],"epss":0.00613,"epssPercentile":0.48021,"exploits":{"github":1,"githubRepos":["https://github.com/0range1337/CVE-CVE-2023-4622"],"checkedAt":"2026-09-23T07:13:26.071Z"},"exploitAvailable":true,"ingestedAt":"2026-09-13T17:07:12.872Z","slug":"CVE-2023-4622","body":"## Overview\n\nA use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.\n\n\n\nThe unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free.\n\n\n\nWe recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c (or backported equivalents).\n\n## Affected\n\n- `linux_kernel >= 4.2, < 4.14.324`\n- `linux_kernel >= 4.15, < 4.19.293`\n- `linux_kernel >= 4.20, < 5.4.255`\n- `linux_kernel >= 5.5, < 5.10.192`\n- `linux_kernel >= 5.11, < 5.15.128`\n- `linux_kernel >= 5.16, < 6.1.47`\n- `linux_kernel >= 6.2, < 6.4.12`\n- `debian_linux = 10.0`\n- `debian_linux = 12.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.4.12`","depth":"midnight","depthScore":55,"depthScoreParts":{"impact":42.9,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":183314,"id":"CVE-2023-4622","ts":1789355894409,"field":"exploit_available","old":"false","new":"true"}]}