A use-after-free flaw was found in io_uring/poll.c in io_poll_check_events in the io_uring subcomponent in the Linux Kernel due to a race condition of poll_refs. This flaw may cause a NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.299-223.520Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfo | Feb 8, 2024 | Jan 26, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 26, 2023 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade kernel-develUpgrade kernel-default-devel | Jun 13, 2023 | Jan 26, 2023 |
| Ubuntu | — | Upgrade linux-image-5.19.0-1016-raspiUpgrade linux-image-genericUpgrade linux-image-5.15.0-1028-gkeUpgrade linux-image-virtualUpgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1034-azure-fdeUpgrade linux-image-oem-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.19.0-1021-kvmUpgrade linux-image-oracleUpgrade linux-image-5.19.0-1022-lowlatencyUpgrade linux-image-5.15.0-1025-raspiUpgrade linux-image-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.19.0-1020-gcpUpgrade linux-image-5.15.0-67-genericUpgrade linux-image-5.15.0-1026-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.0.0-1015-oemUpgrade linux-image-5.17.0-1031-oemUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1025-raspi-nolpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-5.19.0-40-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1030-gcpUpgrade linux-image-5.19.0-1020-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.19.0-40-genericUpgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-5.15.0-67-generic-64kUpgrade linux-image-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-67-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1026-intel-iotgUpgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-5.15.0-1030-oracleUpgrade linux-image-5.15.0-67-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1016-gkeopUpgrade linux-image-5.15.0-1031-awsUpgrade linux-image-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.19.0-40-generic-64kUpgrade linux-image-5.15.0-67-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-5.19.0-1023-awsUpgrade linux-image-5.15.0-1029-kvmUpgrade linux-image-5.19.0-1016-raspi-nolpaeUpgrade linux-image-5.19.0-1022-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-5.19.0-1023-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1034-azure | Mar 22, 2023 | Jan 26, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub