CVE-2023-2236

creationtimestamp| type| source ---|---|--- 2023-05-01 16:29:27+00:00| seen| https://t.me/cibsecurity/63123 2025-03-04 08:15:39+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3ljjzkfz2la2h...

CVE-2023-2236

A use-after-free vulnerability in the Linux Kernel iouring subsystem can be exploited to achieve local privilege escalation. Both ioinstallfixedfile and its callers call fput in a file in case of an error, causing a reference underflow which leads to a use-after-free vulnerability. We recommend...

CVE-2023-2236 Use-after-free in Linux kernel's Performance Events subsystem

A use-after-free vulnerability in the Linux Kernel iouring subsystem can be exploited to achieve local privilege escalation. Both ioinstallfixedfile and its callers call fput in a file in case of an error, causing a reference underflow which leads to a use-after-free vulnerability. We recommend...

CVE-2023-2236

The CVE-2023-2236 entry describes a use-after-free in the Linux Kernel io_uring subsystem. The root cause is a reference underflow caused by fput being called in error paths within io_install_fixed_file and its callers, leading to a local privilege escalation. Affected software is the Linux kerne...