A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation.
Racing a io_uring cancel poll request with a linked timeout can cause a UAF in a hrtimer.
We recommend upgrading past commit ef7dfac51d8ed961b742218f526bd589f3900a59 (4716c73b188566865bdd79c3a6709696a224ac04 for 5.10 stable and 0e388fce7aec40992eadee654193cad345d62663 for 5.15 stable).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-develUpgrade python-perfUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-5.10.186-179.751Upgrade kernel-toolsUpgrade perf-debuginfo | Jul 9, 2024 | Jun 28, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Jan 10, 2024 | Jun 28, 2023 |
| Suse | — | Upgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade reiserfs-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade kernel-develUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade dtb-renesasUpgrade kernel-default-base-rebuildUpgrade dtb-alteraUpgrade kernel-symsUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade kernel-64kb-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-devel-rtUpgrade dtb-rockchipUpgrade kernel-64kb-develUpgrade kernel-azureUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-azure-optionalUpgrade kernel-debugUpgrade kernel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-azureUpgrade kernel-default-optionalUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt_debugUpgrade kernel-debug-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-default-baseUpgrade dtb-appleUpgrade kernel-syms-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-64kb | Jul 11, 2023 | Jun 28, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-azureUpgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-78-genericUpgrade linux-image-5.19.0-1029-awsUpgrade linux-image-5.15.0-78-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1042-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-78-lowlatency-64kUpgrade linux-image-5.15.0-1038-gkeUpgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-5.15.0-1034-raspi-nolpaeUpgrade linux-image-6.1.0-1017-oemUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1038-gcpUpgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.0.0-1020-oemUpgrade linux-image-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-5.15.0-78-generic-lpaeUpgrade linux-image-6.2.0-26-genericUpgrade linux-image-oracleUpgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-6.2.0-1008-awsUpgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-fdeUpgrade linux-image-5.19.0-50-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1040-aws | Jul 26, 2023 | Jun 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub