Lucene search

PRIOn knowledge basePRION:CVE-2024-0582

HistoryJan 16, 2024 - 3:15 p.m.

Memory corruption

2024-01-1615:15:00

PRIOn knowledge base

www.prio-n.com

memory corruption

linux kernel

io_uring

privilege escalation

local user

7.3 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and then frees it. This flaw allows a local user to crash or potentially escalate their privileges on the system.

CPENameOperatorVersion
linux_kerneleq6.7 rc1
linux_kerneleq6.7 rc2
linux_kerneleq6.7 rc3
linux_kernelge6.4
linux_kernellt6.6.5

Name	Operator	Version
linux_kernel	eq	6.7 rc1
linux_kernel	eq	6.7 rc2
linux_kernel	eq	6.7 rc3
linux_kernel	ge	6.4
linux_kernel	lt	6.6.5

References

access.redhat.com/security/cve/CVE-2024-0582

bugs.chromium.org/p/project-zero/issues/detail?id=2504

bugzilla.redhat.com/show_bug.cgi?id=2254050

git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c392cbecd8eca4c53f2bf508731257d9d0a21c2d