2219 matches found
SUSE CVE-2023-6560
An out-of-bounds memory access flaw was found in the iouring SQ/CQ rings functionality in the Linux kernel. This issue could allow a local user to crash the system...
CVE-2023-6560
An out-of-bounds memory access flaw was found in the iouring SQ/CQ rings functionality in the Linux kernel. This issue could allow a local user to crash the system...
USN-6533-1: Linux kernel (OEM) vulnerabilities
Tom Dohrmann discovered that the Secure Encrypted Virtualization SEV implementation for AMD processors in the Linux kernel contained a race condition when accessing MMIO registers. A local attacker in a SEV guest VM could possibly use this to cause a denial of service system crash or possibly...
Exploit for Out-of-bounds Write in Linux Linux_Kernel
iouringLPE-CVE-2023-2598 LPE exploit for CVE-2023-2598. My...
An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit an io_uring/fdinfo.c io_uring_show_fdinfo NULL pointer dereference can occur.
...
kernel: Linux kernel: Denial of Service due to file descriptor leak in io_uring with ocfs2
A flaw was found in the Linux kernel. A local user can exploit a file descriptor leak in the iouring subsystem when performing operations on filesystems that do not support nowait buffered read, such as ocfs2. This vulnerability occurs because a file descriptor fget is acquired but not properly...
kernel: Linux kernel: Denial of Service due to improper io_uring/af_unix file cleanup
A flaw was found in the Linux kernel's iouring/afunix component. A local user could exploit improper handling of registered files during garbage collection. This vulnerability can lead to a memory leak, potentially causing a denial of service DoS on the system...
kernel: Linux kernel: Denial of Service in io_uring due to hung task detection
A flaw was identified in the Linux kernel’s iouring subsystem related to how request completions are handled when an iouring instance exits. During cleanup, the function ioringexitwork was waiting in an uninterruptible state for request completions. Under certain test and signal conditions e.g.,...
kernel: io_uring/rw: defer fsnotify calls to task context
A locking context violation was found in the Linux kernel's iouring subsystem. The fsnotify calls were being made directly from kiocb completion context, which can execute in soft or hard IRQ context. This causes lockdep warnings when fsnotify attempts memory allocation with GFPKERNEL flags, whic...
kernel: io_uring/msg_ring: Fix NULL pointer dereference in io_msg_send_fd()
In the Linux kernel, the following vulnerability has been resolved: iouring/msgring: Fix NULL pointer dereference in iomsgsendfd Syzkaller produced the below call trace: BUG: KASAN: null-ptr-deref in iomsgring+0x3cb/0x9f0 Write of size 8 at addr 0000000000000070 by task repro/16399 CPU: 0 PID:...
The vulnerability of the io_uring_show_fdinfo() function in the io_uring/fdinfo.c module of the io_uring subsystem in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the iouringshowfdinfo function in the iouring/fdinfo.c file of the iouring subsystem in the Linux kernel is related to the assignment of a null pointer due to concurrent access to resources race condition. Exploiting this vulnerability could allow an attacker to cause service...
SUSE CVE-2023-0240
There is a logic error in iouring's implementation which can be used to trigger a use-after-free vulnerability leading to privilege escalation. In the ioprepasyncwork function the assumption that the last iograbidentity call cannot return false is not true, and in this case the function will use...
SUSE CVE-2023-46862
An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an iouring/fdinfo.c iouringshowfdinfo NULL pointer dereference can occur...
CVE-2023-46862
An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an iouring/fdinfo.c iouringshowfdinfo NULL pointer dereference can occur...
CVE-2023-46862
An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an iouring/fdinfo.c iouringshowfdinfo NULL pointer dereference can occur...
CVE-2023-46862
An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an iouring/fdinfo.c iouringshowfdinfo NULL pointer dereference can occur...
AZL-31816 CVE-2023-46862 affecting package kernel for versions less than 5.15.143.1-1
An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an iouring/fdinfo.c iouringshowfdinfo NULL pointer dereference can occur...
UBUNTU-CVE-2023-46862
An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an iouring/fdinfo.c iouringshowfdinfo NULL pointer dereference can occur...
Null pointer dereference
An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an iouring/fdinfo.c iouringshowfdinfo NULL pointer dereference can occur...
