Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux Kernel suffers from a resource management error vulnerability that stems from a denial of service that could result from a post-release reuse of the iofilatable .c fi...

CVE-2023-0469

A use-after-free flaw was found in iouring/filetable.c in ioinstallfixedfile in the iouring subcomponent in the Linux Kernel during call cleanup. This flaw may lead to a denial of service...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux Kernel that originates in the iouring/poll.c file in its iouring subcomponent's iopollcheckevents where a post-release reuse due to a contention condition in...

CVE-2023-0468

A use-after-free flaw was found in iouring/poll.c in iopollcheckevents in the iouring subcomponent in the Linux Kernel due to a race condition of pollrefs. This flaw may cause a NULL pointer dereference...

CVE-2022-4696

A use-after-free flaw was found in the iouring subsystem of the Linux kernel. This issue occurs during the IORINGOPSPLICE operation due to a missing IOWQWORKFILES flag, leading to an invalid decrease of its reference counter and later causing the use-after-free vulnerability. This flaw allows a...

CVE-2023-0469

A use-after-free flaw was found in iouring/filetable.c in ioinstallfixedfile in the iouring subcomponent in the Linux Kernel during call cleanup. This flaw may lead to a denial of service...

CVE-2023-0468

CVE-2023-0468 : A use-after-free race in the Linux kernel’s io_uring/poll.c (io_poll_check_events, io_uring subcomponent) is triggered by a race on poll_refs, potentially causing a NULL pointer dereference. Impact: local attacker could cause a system crash/denial of service; CVSS indicates LOCAL ...

CVE-2023-0468

A use-after-free flaw was found in iouring/poll.c in iopollcheckevents in the iouring subcomponent in the Linux Kernel due to a race condition of pollrefs. This flaw may cause a NULL pointer dereference...

CVE-2023-0469

A use-after-free flaw was found in iouring/filetable.c in ioinstallfixedfile in the iouring subcomponent in the Linux Kernel during call cleanup. This flaw may lead to a denial of service...

CVE-2023-0468

A use-after-free flaw was found in iouring/poll.c in iopollcheckevents in the iouring subcomponent in the Linux Kernel due to a race condition of pollrefs. This flaw may cause a NULL pointer dereference...

CVE-2023-0469

A use-after-free flaw was found in iouring/filetable.c in ioinstallfixedfile in the iouring subcomponent in the Linux Kernel during call cleanup. This flaw may lead to a denial of service...

CVE-2023-0469

CVE-2023-0469 is a use-after-free in io_uring/filetable.c (io_install_fixed_file) within the Linux kernel’s io_uring subcomponent during call cleanup, potentially enabling a local DoS. Affected: Linux kernel with vulnerable io_uring code. Exploitation details are not provided in the supplied docu...

CVE-2023-0468

A use-after-free flaw was found in iouring/poll.c in iopollcheckevents in the iouring subcomponent in the Linux Kernel due to a race condition of pollrefs. This flaw may cause a NULL pointer dereference...

CVE-2023-0468

A use-after-free flaw was found in iouring/poll.c in iopollcheckevents in the iouring subcomponent in the Linux Kernel due to a race condition of pollrefs. This flaw may cause a NULL pointer dereference...

CVE-2023-0469

A use-after-free flaw was found in iouring/filetable.c in ioinstallfixedfile in the iouring subcomponent in the Linux Kernel during call cleanup. This flaw may lead to a denial of service...

PT-2023-9437 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a race condition in the io uring/poll component of the Linux kernel, specifically with multishot requests. A previous commit fixed a poll race that can occur, b...

GSD-2023-1000144 io_uring: Fix a null-ptr-deref in io_tctx_exit_cb()

iouring: Fix a null-ptr-deref in iotctxexitcb This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.83 by commit...

GSD-2023-1000044 io_uring: Fix a null-ptr-deref in io_tctx_exit_cb()

iouring: Fix a null-ptr-deref in iotctxexitcb This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.13 by commit...

The vulnerability of the io_uring subsystem in the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the iouring subsystem in the Linux operating system is related to an unacceptable reduction in the link counter, which can lead to a vulnerability after exploitation. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...

PT-2023-9428 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.2.0-rc3-syzkaller-16369-g358a161a6a9e Description: The issue is related to a lock overflowing for IOPOLL in the io uring component of the Linux kernel. Syzbot reports an issue with overflow filling for IOPOLL,...