A NULL pointer dereference was found in io_file_bitmap_get in io_uring/filetable.c in the io_uring sub-component in the Linux Kernel. When fixed files are unregistered, some context information (file_alloc_{start,end} and alloc_hint) is not cleared. A subsequent request that has auto index selection enabled via IORING_FILE_INDEX_ALLOC can cause a NULL pointer dereference. An unprivileged user can use the flaw to cause a system crash.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-develUpgrade kernel-livepatch-6.1.23-36.46Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-tools | Feb 17, 2025 | Mar 21, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 24, 2023 |
| Suse | — | Upgrade dtb-lgUpgrade kernel-rt-optionalUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-source-rtUpgrade kernel-rtUpgrade kernel-azure-develUpgrade kselftests-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade kernel-64kbUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade kernel-debug-livepatch-develUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-amlogicUpgrade dtb-marvellUpgrade dtb-apmUpgrade gfs2-kmp-rtUpgrade dtb-rockchipUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-armUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-sprdUpgrade dtb-amdUpgrade kernel-debugUpgrade dtb-mediatekUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-debug-develUpgrade kernel-symsUpgrade kernel-rt_debug-develUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatchUpgrade dtb-appleUpgrade kernel-azureUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-alteraUpgrade kselftests-kmp-rtUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-default-develUpgrade kernel-devel-rtUpgrade dtb-socionextUpgrade dtb-caviumUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-optionalUpgrade dlm-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-amazonUpgrade kernel-rt_debugUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-default-optional | Jun 28, 2023 | Mar 24, 2023 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-6.2.0-1005-lowlatencyUpgrade linux-image-6.2.0-1005-oracleUpgrade linux-image-6.2.0-1005-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-6.2.0-1006-raspi-nolpaeUpgrade linux-image-azureUpgrade linux-image-6.2.0-1005-azureUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-6.2.0-1006-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-6.2.0-1005-lowlatency-64kUpgrade linux-image-6.1.0-1009-oemUpgrade linux-image-virtualUpgrade linux-image-6.2.0-1003-ibmUpgrade linux-image-6.2.0-23-generic-lpaeUpgrade linux-image-6.2.0-1006-kvmUpgrade linux-image-6.2.0-23-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.2.0-23-genericUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-6.2.0-1007-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency | Apr 21, 2023 | Mar 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub