The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege escalation.
The io_file_get_fixed function lacks the presence of ctx->uring_lock which can lead to a Use-After-Free vulnerability due a race condition with fixed files getting unregistered.
We recommend upgrading past commit da24142b1ef9fd5d36b76e36bab328a5b27523e8.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.173-154.642Upgrade perfUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-livepatch-5.15.102-61.139Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo | Jul 19, 2024 | Apr 12, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Apr 12, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Jan 10, 2024 | Apr 12, 2023 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-preemptUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade dtb-zteUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade dtb-al | May 10, 2023 | Apr 12, 2023 |
| Ubuntu | — | Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1028-raspi-nolpaeUpgrade linux-image-5.15.0-71-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-71-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1037-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1019-gkeopUpgrade linux-image-5.15.0-1037-azureUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1033-gcpUpgrade linux-image-genericUpgrade linux-image-5.15.0-71-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-gke-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-71-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1029-ibmUpgrade linux-image-5.15.0-1028-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1034-oracleUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1035-awsUpgrade linux-image-intel-iotgUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-71-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1032-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-kvmUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1032-kvmUpgrade linux-image-intelUpgrade linux-image-azure-cvm | May 1, 2023 | Apr 12, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub