2 matches found
SUSE CVE-2023-0240
There is a logic error in iouring's implementation which can be used to trigger a use-after-free vulnerability leading to privilege escalation. In the ioprepasyncwork function the assumption that the last iograbidentity call cannot return false is not true, and in this case the function will use...
7.8CVSS7.1AI score0.00269EPSS
SaveExploits0References3
UBUNTU-CVE-2023-0240
There is a logic error in iouring's implementation which can be used to trigger a use-after-free vulnerability leading to privilege escalation. In the ioprepasyncwork function the assumption that the last iograbidentity call cannot return false is not true, and in this case the function will use...
7.8CVSS6.7AI score0.00269EPSS
SaveExploits0References5
20