A use-after-free flaw was found in io_uring/poll.c in io_poll_check_events in the io_uring subcomponent in the Linux Kernel due to a race condition of poll_refs. This flaw may cause a NULL pointer dereference.

🗓️ 02 Feb 2023 08:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 1 Views

A use-after-free flaw in io_uring poll handling may race on poll_refs and dereference NULL.

Reporter	Title	Published	Views	Family All 227
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2-2022-1888 (ALAS-2022-1888)	7 Dec 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2023-012 (ALASKERNEL-5.15-2023-012)	24 Jan 202300:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: kernel (CVE-2023-0468)	20 Mar 202300:00	–	nessus
Tenable Nessus	TencentOS Server 4: kernel (TSSA-2024:0960)	16 Jun 202500:00	–	nessus
Tenable Nessus	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-5912-1)	6 Mar 202300:00	–	nessus
Tenable Nessus	Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-5935-1)	7 Mar 202300:00	–	nessus
Tenable Nessus	Ubuntu 22.04 LTS : Linux kernel (GKE) vulnerabilities (USN-5938-1)	9 Mar 202300:00	–	nessus
Tenable Nessus	Ubuntu 22.04 LTS : Linux kernel (KVM) vulnerabilities (USN-5941-1)	10 Mar 202300:00	–	nessus
Tenable Nessus	Ubuntu 22.04 LTS : Linux kernel (Intel IoTG) vulnerabilities (USN-5962-1)	16 Mar 202300:00	–	nessus
Tenable Nessus	Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-6024-1)	19 Apr 202300:00	–	nessus

Vulners

Node

OR

microsoft cbl2_kernel_5.15.92.1-1Range<5.15.92.1-1

microsoft cm1_kernel_5.10.189.1-1Range<5.10.189.1-1

02 Feb 2023 08:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.14.7

EPSS0.0028

SSVC

io_uring poll references use after free null pointer dereference