CVE-2023-52772

Summary

CVE-2023-52772 is a use-after-free vulnerability discovered in the Linux kernel's unix_stream_read_actor() function in af_unix.c. The issue allows a thread to change a socket's skb (Socket Buffer) after releasing the socket lock, leading to a use-after-free condition. This vulnerability can potentially result in a kernel crash or arbitrary code execution. The reported crash occurred during unix_stream_recv_urg() when the affected socket was being read and written by different threads concurrently. The vulnerability was identified using the KASAN memory error detector.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.