A use-after-free flaw was found in io_uring/poll.c in io_poll_check_events in the io_uring subcomponent in the Linux Kernel due to a race condition of poll_refs. This flaw may cause a NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.86-53.137Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-4.14.299-223.520Upgrade kernel-debuginfo | Feb 8, 2024 | Jan 26, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 26, 2023 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-azureUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-devel | Jun 13, 2023 | Jan 26, 2023 |
| Ubuntu | — | Upgrade linux-image-5.17.0-1031-oemUpgrade linux-image-virtualUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1025-raspiUpgrade linux-image-5.19.0-1016-raspiUpgrade linux-image-5.19.0-1020-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1025-raspi-nolpaeUpgrade linux-image-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.0.0-1015-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-5.19.0-1021-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-5.19.0-40-generic-lpaeUpgrade linux-image-5.15.0-1034-azure-fdeUpgrade linux-image-5.15.0-1026-ibmUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-67-genericUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1028-gkeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.19.0-1022-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-67-lowlatencyUpgrade linux-image-5.19.0-1020-oracleUpgrade linux-image-5.15.0-1029-kvmUpgrade linux-image-5.19.0-40-generic-64kUpgrade linux-image-5.19.0-1023-awsUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-5.15.0-1030-gcpUpgrade linux-image-5.19.0-1022-lowlatency-64kUpgrade linux-image-5.19.0-1016-raspi-nolpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1034-azureUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1016-gkeopUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1031-awsUpgrade linux-image-5.15.0-1026-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-67-generic-64kUpgrade linux-image-5.19.0-40-genericUpgrade linux-image-kvmUpgrade linux-image-5.19.0-1023-azureUpgrade linux-image-awsUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-raspi-nolpaeUpgrade linux-image-ibmUpgrade linux-image-5.15.0-67-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1030-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-67-generic-lpae | Mar 22, 2023 | Jan 26, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub