A use-after-free flaw was found in io_uring/poll.c in io_poll_check_events in the io_uring subcomponent in the Linux Kernel due to a race condition of poll_refs. This flaw may cause a NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.299-223.520Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade perf-debuginfo | Feb 8, 2024 | Jan 26, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 26, 2023 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-docs | Jun 13, 2023 | Jan 26, 2023 |
| Ubuntu | — | Upgrade linux-image-6.0.0-1015-oemUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.19.0-40-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1025-raspi-nolpaeUpgrade linux-image-5.17.0-1031-oemUpgrade linux-image-5.15.0-67-genericUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1034-azure-fdeUpgrade linux-image-5.19.0-1021-kvmUpgrade linux-image-5.19.0-1022-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1028-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-5.19.0-1016-raspiUpgrade linux-image-5.15.0-1025-raspiUpgrade linux-image-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-5.19.0-1020-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1026-ibmUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1030-oracleUpgrade linux-image-5.15.0-1016-gkeopUpgrade linux-image-5.15.0-1026-intel-iotgUpgrade linux-image-5.15.0-67-generic-64kUpgrade linux-image-ibmUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.19.0-40-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-67-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-67-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-5.15.0-1031-awsUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1029-kvmUpgrade linux-image-5.19.0-40-generic-64kUpgrade linux-image-5.15.0-67-lowlatencyUpgrade linux-image-5.15.0-1034-azureUpgrade linux-image-5.19.0-1023-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1030-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-5.19.0-1023-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-1020-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-5.19.0-1016-raspi-nolpaeUpgrade linux-image-raspiUpgrade linux-image-5.19.0-1022-lowlatency-64k | Mar 22, 2023 | Jan 26, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub