A use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege escalation.
The io_file_get_fixed function lacks the presence of ctx->uring_lock which can lead to a Use-After-Free vulnerability due a race condition with fixed files getting unregistered.
We recommend upgrading past commit da24142b1ef9fd5d36b76e36bab328a5b27523e8.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.173-154.642Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-livepatch-5.15.102-61.139Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-devel | Jul 19, 2024 | Apr 12, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Apr 12, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Jan 10, 2024 | Apr 12, 2023 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-preempt-develUpgrade kernel-preemptUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-macrosUpgrade dtb-alUpgrade kernel-obs-buildUpgrade dtb-zteUpgrade kernel-defaultUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-default-base | May 10, 2023 | Apr 12, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1032-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-5.15.0-71-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1032-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-5.15.0-1035-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1028-raspiUpgrade linux-image-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1034-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-71-generic-64kUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1037-azure-fdeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1019-gkeopUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-71-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1029-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1037-azureUpgrade linux-image-5.15.0-1033-gcpUpgrade linux-image-virtualUpgrade linux-image-5.15.0-71-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-71-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1028-raspi-nolpae | May 1, 2023 | Apr 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub