{
  "cveId": "CVE-2023-54226",
  "url": "https://patchblox.com/security/cve/CVE-2023-54226",
  "summary": "CVE-2023-54226 is fixed in 20 products on 1 platform, first by ALAS2023-2023-228, released June 21, 2023. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  af_unix: Fix data races around sk-\u003Esk_shutdown",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  af_unix: Fix data races around sk-\u003Esk_shutdown.  KCSAN found a data race around sk-\u003Esk_shutdown where unix_release_sock() and unix_shutdown() update it under unix_state_lock(), OTOH unix_poll() and unix_dgram_poll() read it locklessly.  We need to annotate the writes and reads with WRITE_ONCE() and READ_ONCE().  BUG: KCSAN: data-race in unix_poll / unix_release_sock  write to 0xffff88800d0f8aec of 1 bytes by task 264 on cpu 0:  unix_release_sock\u002B0x75c/0x910 net/unix/af_unix.c:631  unix_release\u002B0x59/0x80 net/unix/af_unix.c:1042  __sock_release\u002B0x7d/0x170 net/socket.c:653  sock_close\u002B0x19/0x30 net/socket.c:1397  __fput\u002B0x179/0x5e0 fs/file_table.c:321  ____fput\u002B0x15/0x20 fs/file_table.c:349  task_work_run\u002B0x116/0x1a0 kernel/task_work.c:179  resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]  exit_to_user_mode_loop kernel/entry/common.c:171 [inline]  exit_to_user_mode_prepare\u002B0x174/0x180 kernel/entry/common.c:204  __syscall_exit_to_user_mode_work kernel/entry/common.c:286 [inline]  syscall_exit_to_user_mode\u002B0x1a/0x30 kernel/entry/common.c:297  do_syscall_64\u002B0x4b/0x90 arch/x86/entry/common.c:86  entry_SYSCALL_64_after_hwframe\u002B0x72/0xdc  read to 0xffff88800d0f8aec of 1 bytes by task 222 on cpu 1:  unix_poll\u002B0xa3/0x2a0 net/unix/af_unix.c:3170  sock_poll\u002B0xcf/0x2b0 net/socket.c:1385  vfs_poll include/linux/poll.h:88 [inline]  ep_item_poll.isra.0\u002B0x78/0xc0 fs/eventpoll.c:855  ep_send_events fs/eventpoll.c:1694 [inline]  ep_poll fs/eventpoll.c:1823 [inline]  do_epoll_wait\u002B0x6c4/0xea0 fs/eventpoll.c:2258  __do_sys_epoll_wait fs/eventpoll.c:2270 [inline]  __se_sys_epoll_wait fs/eventpoll.c:2265 [inline]  __x64_sys_epoll_wait\u002B0xcc/0x190 fs/eventpoll.c:2265  do_syscall_x64 arch/x86/entry/common.c:50 [inline]  do_syscall_64\u002B0x3b/0x90 arch/x86/entry/common.c:80  entry_SYSCALL_64_after_hwframe\u002B0x72/0xdc  value changed: 0x00 -\u003E 0x03  Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 222 Comm: dbus-broker Not tainted 6.3.0-rc7-02330-gca6270c12e20 #2 Hardware name: QEMU Standard PC (i440FX \u002B PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014",
  "published": "2023-06-21T19:11:00Z",
  "severity": "important",
  "epss": 0.00205,
  "epssPercentile": 0.10515,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "amzn 2023",
      "fixedVersion": "6.1.34-56.100.amzn2023",
      "fix": "ALAS2023-2023-228",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-228",
      "released": "2023-06-21T19:11:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.34-56.100.amzn2023",
      "fix": "ALAS2023-2023-228",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-228",
      "released": "2023-06-21T19:11:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.34-56.100.amzn2023",
      "fix": "ALAS2023-2023-228",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-228",
      "released": "2023-06-21T19:11:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.34-56.100.amzn2023",
      "fix": "ALAS2023-2023-228",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-228",
      "released": "2023-06-21T19:11:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.34-56.100.amzn2023",
      "fix": "ALAS2023-2023-228",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-228",
      "released": "2023-06-21T19:11:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.34-56.100.amzn2023",
      "fix": "ALAS2023-2023-228",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-228",
      "released": "2023-06-21T19:11:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.34-56.100.amzn2023",
      "fix": "ALAS2023-2023-228",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-228",
      "released": "2023-06-21T19:11:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-headers",
      "release": "amzn 2023",
      "fixedVersion": "6.1.34-56.100.amzn2023",
      "fix": "ALAS2023-2023-228",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-228",
      "released": "2023-06-21T19:11:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.34-56.100.amzn2023",
      "fix": "ALAS2023-2023-228",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-228",
      "released": "2023-06-21T19:11:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.34-56.100.amzn2023",
      "fix": "ALAS2023-2023-228",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-228",
      "released": "2023-06-21T19:11:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "6.1.34-56.100.amzn2023",
      "fix": "ALAS2023-2023-228",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-228",
      "released": "2023-06-21T19:11:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.1.34-56.100",
      "release": "amzn 2023",
      "fixedVersion": "1.0-0.amzn2023",
      "fix": "ALAS2023-2023-228",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-228",
      "released": "2023-06-21T19:11:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools",
      "release": "amzn 2023",
      "fixedVersion": "6.1.34-56.100.amzn2023",
      "fix": "ALAS2023-2023-228",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-228",
      "released": "2023-06-21T19:11:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.34-56.100.amzn2023",
      "fix": "ALAS2023-2023-228",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-228",
      "released": "2023-06-21T19:11:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.34-56.100.amzn2023",
      "fix": "ALAS2023-2023-228",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-228",
      "released": "2023-06-21T19:11:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.37-1",
      "fix": "DEBIAN-CVE-2023-54226",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-54226",
      "released": "2025-12-30T13:16:10Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.3.7-1",
      "fix": "DEBIAN-CVE-2023-54226",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-54226",
      "released": "2025-12-30T13:16:10Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.3.7-1",
      "fix": "DEBIAN-CVE-2023-54226",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-54226",
      "released": "2025-12-30T13:16:10Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.34-56.100.amzn2023",
      "fix": "ALAS2023-2023-228",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-228",
      "released": "2023-06-21T19:11:00Z"
    },
    {
      "platform": "linux",
      "product": "perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.34-56.100.amzn2023",
      "fix": "ALAS2023-2023-228",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-228",
      "released": "2023-06-21T19:11:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.34-56.100.amzn2023",
      "fix": "ALAS2023-2023-228",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-228",
      "released": "2023-06-21T19:11:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.34-56.100.amzn2023",
      "fix": "ALAS2023-2023-228",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-228",
      "released": "2023-06-21T19:11:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}