Lucene search

K
nvd[email protected]NVD:CVE-2023-0469
HistoryJan 26, 2023 - 9:18 p.m.

CVE-2023-0469

2023-01-2621:18:09
CWE-416
CWE-191
web.nvd.nist.gov
use-after-free
linux kernel
io_uring
denial of service

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

A use-after-free flaw was found in io_uring/filetable.c in io_install_fixed_file in the io_uring subcomponent in the Linux Kernel during call cleanup. This flaw may lead to a denial of service.

Affected configurations

NVD
Node
linuxlinux_kernelRange<6.1
OR
linuxlinux_kernelMatch6.1-
OR
linuxlinux_kernelMatch6.1rc1
OR
linuxlinux_kernelMatch6.1rc2
OR
linuxlinux_kernelMatch6.1rc3
OR
linuxlinux_kernelMatch6.1rc4
OR
linuxlinux_kernelMatch6.1rc5
OR
linuxlinux_kernelMatch6.1rc6

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%