Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2023-4622

CVE-2023-4622HIGH

Linux Kernel — Use-after-free in Linux kernel's af_unix component

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   H   L   N  U  H  H  H    7.0   .0061   47.6     —

AFFECTED
  Product  Versions  Fixed
  Kernel   4.2 –     6.5

TIMELINE
  Aug 30  Reserved by Google
  Sep 6   Published (CNA: Google)
  Sep 17  RESCORED — CVE-2023-4622 (Linux Kernel). CVSS 7.8 → 7 (NVD).

CWE-416 · CNA: Google · CVSS v3.1 · 7 references · NVD status: Modified

Description

A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free. We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c (or backported equivalents).

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
August 30, 2023	Reserved	Reserved by Google
September 6, 2023	Published	Published (CNA: Google)
September 17, 2026	RESCORED	RESCORED — CVE-2023-4622 (Linux Kernel). CVSS 7.8 → 7 (NVD).

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
Linux	Kernel	—	4.2	6.5

Weaknesses

CWE-416

References (7)

http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html [Third Party Advisory]
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-6.1.y&id=790c2f9d15b594350ae9bca7b236f2b1859de02c [Issue Tracking, Mailing List, Patch, Vendor Advisory]
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4821df2ffe38d629170edc266e65fa05970e0745
https://kernel.dance/790c2f9d15b594350ae9bca7b236f2b1859de02c [Patch, Vendor Advisory]
https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html [Mailing List, Third Party Advisory]
https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html [Mailing List, Third Party Advisory]
https://www.debian.org/security/2023/dsa-5492 [Third Party Advisory]

Authoritative record: CVE-2023-4622 at cve.org

Vendors: linux

Weaknesses: CWE-416

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2023-4622 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.