7.8
High
CVE-2023-1872 A use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege…
Description
A use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege escalation. The io_file_get_fixed function lacks the presence of ctx->uring_lock which can lead to a Use-After-Free vulnerability due a race condition with fixed files getting unregistered. We recommend upgrading past commit da24142b1ef9fd5d36b76e36bab328a5b27523e8.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Kernel 5.7 | 5.7 → 5.17 | No fix stated |
References
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- lists.debian.org lists.debian.org
- security.netapp.com security.netapp.com
- packetstormsecurity.com packetstormsecurity.com
Timeline
- Published
- Last modified
Other CVEs of Linux Kernel
The 43 CVEs of Linux Kernel →
CVE-2024-24864
A race condition was found in the Linux kernel's media/dvb-core in dvbdmx_write() function
5.3
Medium
CVE-2024-24857
A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function
4.6
Medium
CVE-2024-24858
A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function
4.6
Medium
CVE-2024-24859
A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function
4.6
Medium