Linux Distros Unpatched Vulnerability : CVE-2023-52654

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iouring/afunix: disable sending iouring over sockets File reference cycles have caused lots ...

kernel: io_uring: drop any code related to SCM_RIGHTS

A flaw was found in the Linux kernel that addresses the removal of dead code related to SCMRIGHTS support within the iouring. This code was deemed unnecessary after the kernel dropped the ability to pass iouring file descriptors over SCMRIGHTS. The vulnerability was assigned CVE status due to...

CVE-2023-52654 affecting package hyperv-daemons for versions less than 6.6.35.1-1

CVE-2023-52654 affecting package hyperv-daemons for versions less than 6.6.35.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-52654

A security vulnerability was identified in the Linux kernel's iouring subsystem, specifically related to the handling of file descriptors over UNIX domain sockets. The issue arises from the potential for file reference cycles when iouring file descriptors are transmitted over sockets using the...

CVE-2023-52654

In the Linux kernel, the following vulnerability has been resolved: iouring/afunix: disable sending iouring over sockets File reference cycles have caused lots of problems for iouring in the past, and it still doesn't work exactly right and races with unixstreamreadgeneric. The safest fix would b...

CVE-2023-52654

The CVE-2023-52654 entry concerns the Linux kernel io_uring/af_unix component. The issue arises from file reference cycles when io_uring files are sent via sockets, which can race with unix_stream_read_generic(). The safe fix implemented is to disallow sending io_uring files over sockets via SCM_...