Exploitation Summary
EIP tracks 1 public exploit for CVE-2023-6546. PoCs published by harithlab.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2023-6546, targeting a race condition in the n_gsm tty line discipline in Linux kernels 4.18.x. The exploit leverages a use-after-free (UAF) vulnerability to achieve local privilege escalation (LPE) by manipulating kernel structures and executing arbitrary commands as root.
Description
A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci while restarting the gsm mux. This could allow a local unprivileged user to escalate their privileges on the system.
Exploits (1)
This repository contains a functional exploit for CVE-2023-6546, targeting a race condition in the n_gsm tty line discipline in Linux kernels 4.18.x. The exploit leverages a use-after-free (UAF) vulnerability to achieve local privilege escalation (LPE) by manipulating kernel structures and executing arbitrary commands as root.
References (31)
Scores
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H