A NULL pointer dereference was found in io_file_bitmap_get in io_uring/filetable.c in the io_uring sub-component in the Linux Kernel. When fixed files are unregistered, some context information (file_alloc_{start,end} and alloc_hint) is not cleared. A subsequent request that has auto index selection enabled via IORING_FILE_INDEX_ALLOC can cause a NULL pointer dereference. An unprivileged user can use the flaw to cause a system crash.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.23-36.46Upgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade bpftool | Feb 17, 2025 | Mar 21, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 24, 2023 |
| Suse | — | Upgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade dtb-appleUpgrade dtb-alteraUpgrade dtb-armUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-debug-develUpgrade kernel-symsUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade kernel-64kb-optionalUpgrade kernel-source-vanillaUpgrade kernel-docsUpgrade dtb-amazonUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade dtb-amdUpgrade kernel-azure-optionalUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade kernel-debugUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-devel-rtUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-azureUpgrade dtb-freescaleUpgrade kernel-debug-vdsoUpgrade kernel-default-develUpgrade dtb-socionextUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-azureUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-sourceUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade dtb-exynosUpgrade dtb-marvellUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-develUpgrade dtb-apmUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade dtb-broadcomUpgrade dlm-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-obs-buildUpgrade dtb-qcomUpgrade kernel-macrosUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-default-vdsoUpgrade kselftests-kmp-azureUpgrade dtb-rockchipUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optional | Jun 28, 2023 | Mar 24, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-1006-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-6.2.0-1007-gcpUpgrade linux-image-6.2.0-1005-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-6.2.0-23-genericUpgrade linux-image-6.2.0-1006-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-6.1.0-1009-oemUpgrade linux-image-6.2.0-23-generic-lpaeUpgrade linux-image-6.2.0-23-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-6.2.0-1003-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-6.2.0-1005-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.2.0-1005-oracleUpgrade linux-image-6.2.0-1006-raspi-nolpaeUpgrade linux-image-6.2.0-1005-azureUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-6.2.0-1005-awsUpgrade linux-image-raspiUpgrade linux-image-gcp | Apr 21, 2023 | Mar 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub