Lucene search

K
cvelistRedhatCVELIST:CVE-2024-0582
HistoryJan 16, 2024 - 2:33 p.m.

CVE-2024-0582 Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap

2024-01-1614:33:44
CWE-416
redhat
raw.githubusercontent.com
1
memory leak
linux kernel
io_uring
buffer ring
privilege escalation
vulnerability
mmap

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and then frees it. This flaw allows a local user to crash or potentially escalate their privileges on the system.

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%