A NULL pointer dereference was found in io_file_bitmap_get in io_uring/filetable.c in the io_uring sub-component in the Linux Kernel. When fixed files are unregistered, some context information (file_alloc_{start,end} and alloc_hint) is not cleared. A subsequent request that has auto index selection enabled via IORING_FILE_INDEX_ALLOC can cause a NULL pointer dereference. An unprivileged user can use the flaw to cause a system crash.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-livepatch-6.1.23-36.46Upgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-devel | Feb 17, 2025 | Mar 21, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 24, 2023 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-defaultUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-rtUpgrade dtb-rockchipUpgrade kernel-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade dtb-lgUpgrade kernel-default-extraUpgrade kernel-rt-optionalUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade dtb-qcomUpgrade ocfs2-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade kernel-rt-extraUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade kernel-azure-livepatch-develUpgrade dtb-marvellUpgrade kselftests-kmp-azureUpgrade dtb-amlogicUpgrade kselftests-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-debug-develUpgrade dtb-alteraUpgrade kernel-default-livepatch-develUpgrade dtb-amazonUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dtb-caviumUpgrade kernel-docsUpgrade dtb-armUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade kernel-debug-vdsoUpgrade dtb-socionextUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azureUpgrade kernel-rt-develUpgrade kernel-azure-optionalUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-azure-extraUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-devel-rtUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade dtb-allwinner | Jun 28, 2023 | Mar 24, 2023 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-6.2.0-1005-awsUpgrade linux-image-6.2.0-1005-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-6.2.0-1005-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.2.0-1005-azureUpgrade linux-image-awsUpgrade linux-image-6.2.0-1006-raspi-nolpaeUpgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-6.2.0-1003-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.1.0-1009-oemUpgrade linux-image-6.2.0-23-genericUpgrade linux-image-6.2.0-23-generic-64kUpgrade linux-image-virtualUpgrade linux-image-6.2.0-1005-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-6.2.0-1007-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatencyUpgrade linux-image-6.2.0-1006-raspiUpgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-6.2.0-23-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-6.2.0-1006-kvm | Apr 21, 2023 | Mar 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub