A use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege escalation.
The io_file_get_fixed function lacks the presence of ctx->uring_lock which can lead to a Use-After-Free vulnerability due a race condition with fixed files getting unregistered.
We recommend upgrading past commit da24142b1ef9fd5d36b76e36bab328a5b27523e8.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-livepatch-5.15.102-61.139Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.173-154.642Upgrade python-perf | Jul 19, 2024 | Apr 12, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Apr 12, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jan 10, 2024 | Apr 12, 2023 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-preemptUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade kernel-preempt-develUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-symsUpgrade dtb-zteUpgrade dtb-alUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade kernel-docs | May 10, 2023 | Apr 12, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1028-raspi-nolpaeUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1019-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1037-azure-fdeUpgrade linux-image-5.15.0-1033-gcpUpgrade linux-image-5.15.0-71-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-71-generic-lpaeUpgrade linux-image-5.15.0-71-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1029-ibmUpgrade linux-image-5.15.0-71-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-5.15.0-1037-azureUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-5.15.0-1034-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04Upgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1032-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1035-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-intelUpgrade linux-image-5.15.0-1032-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1028-raspiUpgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-71-lowlatency-64k | May 1, 2023 | Apr 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub