CVE-2023-52654

A security vulnerability was identified in the Linux kernel's iouring subsystem, specifically related to the handling of file descriptors over UNIX domain sockets. The issue arises from the potential for file reference cycles when iouring file descriptors are transmitted over sockets using the...

CVE-2023-52654

The CVE-2023-52654 entry concerns the Linux kernel io_uring/af_unix component. The issue arises from file reference cycles when io_uring files are sent via sockets, which can race with unix_stream_read_generic(). The safe fix implemented is to disallow sending io_uring files over sockets via SCM_...

CVE-2023-52654 io_uring/af_unix: disable sending io_uring over sockets

In the Linux kernel, the following vulnerability has been resolved: iouring/afunix: disable sending iouring over sockets File reference cycles have caused lots of problems for iouring in the past, and it still doesn't work exactly right and races with unixstreamreadgeneric. The safest fix would b...

CVE-2023-52654: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iouring/afunix: disable sending iouring over sockets File reference cycles have caused lots of problems for iouring in the past, and it still doesn't work exactly right and races with unixstreamreadgeneric. The safest fix would b...

PT-2024-8166

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to errors in resource management in the io uring/af unix component of the Linux kernel. This can lead to problems such as file reference cycles, which have caused...