A use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege escalation.
The io_file_get_fixed function lacks the presence of ctx->uring_lock which can lead to a Use-After-Free vulnerability due a race condition with fixed files getting unregistered.
We recommend upgrading past commit da24142b1ef9fd5d36b76e36bab328a5b27523e8.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.102-61.139Upgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.173-154.642Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perf | Jul 19, 2024 | Apr 12, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Apr 12, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Jan 10, 2024 | Apr 12, 2023 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-macrosUpgrade dtb-alUpgrade kernel-64kb-develUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade dtb-zteUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-preemptUpgrade kernel-zfcpdumpUpgrade kernel-source | May 10, 2023 | Apr 12, 2023 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-oracleUpgrade linux-image-5.15.0-71-lowlatencyUpgrade linux-image-5.15.0-1029-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1037-azureUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1033-gcpUpgrade linux-image-5.15.0-71-genericUpgrade linux-image-5.15.0-71-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1019-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1037-azure-fdeUpgrade linux-image-5.15.0-71-generic-lpaeUpgrade linux-image-5.15.0-1028-raspi-nolpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04Upgrade linux-image-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-5.15.0-1035-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1034-oracleUpgrade linux-image-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1032-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1032-gkeUpgrade linux-image-intelUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-5.15.0-1028-raspiUpgrade linux-image-5.15.0-71-lowlatency-64kUpgrade linux-image-azure-fde | May 1, 2023 | Apr 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub