Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-2236
HistoryMay 01, 2023 - 1:15 p.m.

Design/Logic Flaw

2023-05-0113:15:00
PRIOn knowledge base
www.prio-n.com
8
design/logic flaw
linux kernel
io_uring
use-after-free
vulnerability
local privilege escalation
upgrading
nvd

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation.

BothΒ io_install_fixed_fileΒ and its callers call fput in a file in case of an error, causing a reference underflow which leads to a use-after-free vulnerability.

We recommend upgrading past commit 9d94c04c0db024922e886c9fd429659f22f48ea4.

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%