ZeroDay Findings
Sign inSign up

Findings

CVE-2023-0590

A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem.

Published Mar 23, 2023 · updated Oct 14, 2026 · linux linux kernel

A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. If patch ebda44da44f6 ("net: sched: fix race condition in qdisc_graft()") not applied yet, then kernel could be affected.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 23, 2023 · NIST NVD

    Detected

    A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. If patch ebda44da44f6 ("net: sched: fix race condition in qdisc_graft()") not applied yet, then kernel could be affected.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. If patch ebda44da44f6 ("net: sched: fix race condition in qdisc_graft()") not applied yet, then kernel could be affected.

Affected

  • cpe linux/linux kernelversion unspecified
  • cpe linux/linux kernel6.1

Sources

  • CVE.orgVulnerability recordCVE-2023-0590

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2023-0590

    30-day exploitation probability 0.2%

    first.org
  • NIST NVDVulnerability recordCVE-2023-0590

    A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. If patch ebda44da44f6 ("net: sched: fix race condition in qdisc_graft()") not applied yet, then kernel could be affected.

    nvd.nist.gov

References