A use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege escalation.
The io_file_get_fixed function lacks the presence of ctx->uring_lock which can lead to a Use-After-Free vulnerability due a race condition with fixed files getting unregistered.
We recommend upgrading past commit da24142b1ef9fd5d36b76e36bab328a5b27523e8.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-livepatch-5.10.173-154.642Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-livepatch-5.15.102-61.139Upgrade kernel-debuginfoUpgrade kernel-tools-devel | Jul 19, 2024 | Apr 12, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Apr 12, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Jan 10, 2024 | Apr 12, 2023 |
| Suse | — | Upgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-alUpgrade kernel-defaultUpgrade dtb-zteUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kernel-preemptUpgrade kernel-source | May 10, 2023 | Apr 12, 2023 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-71-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-5.15.0-71-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1019-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1029-ibmUpgrade linux-image-5.15.0-1033-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-71-genericUpgrade linux-image-gke-5.15Upgrade linux-image-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1028-raspi-nolpaeUpgrade linux-image-5.15.0-1037-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1037-azure-fdeUpgrade linux-image-5.15.0-71-generic-64kUpgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-5.15.0-1035-awsUpgrade linux-image-azureUpgrade linux-image-5.15.0-1028-raspiUpgrade linux-image-5.15.0-1032-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1032-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-generic-64kUpgrade linux-image-intelUpgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1034-oracleUpgrade linux-image-5.15.0-71-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04d | May 1, 2023 | Apr 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub