CVE-2023-2598

2023-06-0100:00:00

CWE-416

redhat

www.cve.org

linux kernel

io_uring

buffer registration

out-of-bounds access

physical memory

privilege escalation

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A flaw was found in the fixed buffer registration code for io_uring (io_sqe_buffer_register in io_uring/rsrc.c) in the Linux kernel that allows out-of-bounds access to physical memory beyond the end of the buffer. This flaw enables full local privilege escalation.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Kernel",
    "versions": [
      {
        "version": "Kernel prior to  6.4-rc1",
        "status": "affected"
      }
    ]
  }
]