CVE-2023-54161 Details

A null pointer dereference vulnerability has been identified in the Linux kernel's af_unix implementation, specifically within the unix_stream_sendpage() function. This vulnerability arises because the function attempts to add data to the last socket buffer (skb) in the peer's receive queue without properly locking the queue. A race condition can occur if the peer's file descriptor (FD) is passed to another socket, creating a loop between them. Closing both sockets without receiving the FD allows garbage collection to unlink the skb from the receive queue, potentially leading to a use-after-free condition. The vulnerability affects Linux kernel versions through 6.4, with the issue being resolved in version 6.5 and later.

Users can upgrade to Linux kernel version 6.5 or later, where this vulnerability has been fixed.