SUSE CVE-2022-4696

There exists a use-after-free vulnerability in the Linux kernel through iouring and the IORINGOPSPLICE operation. If IORINGOPSPLICE is missing the IOWQWORKFILES flag, which signals that the operation won't use current-nsproxy, so its reference counter is not increased. This assumption is not alwa...

SUSE CVE-2022-29582

In the Linux kernel before 5.17.3, fs/iouring.c has a use-after-free due to a race condition in iouring timeouts. This can be triggered by a local user who has no access to any user namespace; however, the race condition perhaps can only be exploited infrequently...

SUSE CVE-2022-29968

An issue was discovered in the Linux kernel through 5.17.5. iorwinitfile in fs/iouring.c lacks initialization of kiocb-private...

SUSE CVE-2023-0469

A use-after-free flaw was found in iouring/filetable.c in ioinstallfixedfile in the iouring subcomponent in the Linux Kernel during call cleanup. This flaw may lead to a denial of service...

SUSE CVE-2023-0468

A use-after-free flaw was found in iouring/poll.c in iopollcheckevents in the iouring subcomponent in the Linux Kernel due to a race condition of pollrefs. This flaw may cause a NULL pointer dereference...

io_uring Heap Buffer Overflow DoS

The vulnerability of the iostatx function in the fs/iouring.c module of the iouring component of the Linux operating system’s kernel is related to the use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure or increase their privileges...

GSD-2023-1002183 io_uring/io-wq: only free worker if it was allocated for creation

iouring/io-wq: only free worker if it was allocated for creation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...

GSD-2023-1002182 io_uring: lock overflowing for IOPOLL

iouring: lock overflowing for IOPOLL This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.165 by commit de77faee280163ff03b7ab64af6c9d779a43d4c...

GSD-2023-1002116 io_uring/io-wq: only free worker if it was allocated for creation

iouring/io-wq: only free worker if it was allocated for creation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.89 by commit...

GSD-2023-1002115 io_uring: lock overflowing for IOPOLL

iouring: lock overflowing for IOPOLL This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.89 by commit ed4629d1e968359fbb91d0a3780b1e86a2c08845...

GSD-2023-1002021 io_uring/poll: add hash if ready poll request can't complete inline

iouring/poll: add hash if ready poll request can't complete inline This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

GSD-2023-1001985 io_uring/io-wq: only free worker if it was allocated for creation

iouring/io-wq: only free worker if it was allocated for creation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

GSD-2023-1001984 io_uring: lock overflowing for IOPOLL

iouring: lock overflowing for IOPOLL This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit 7fc3990dad04a677606337ebc61964094d6cb41b...

GSD-2023-1001962 io_uring/poll: don't reissue in case of poll race on multishot request

iouring/poll: don't reissue in case of poll race on multishot request This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

PT-2023-35060 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue is related to io uring, where a lock overflowing occurs for IOPOLL. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-35061

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.1.7 Description The issue is related to the io uring/io-wq component, where a worker is freed without being allocated for creation. The actual impact and attack plausibility have not yet been proven...

PT-2023-35258

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.165 Description The issue is related to io uring, where a lock overflowing occurs for IOPOLL. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2023-35191

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.89 Description The issue is related to io uring, where a lock overflowing occurs for IOPOLL. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

SUSE-SU-2023:0339-1 Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059101 fixes one issue. The following security issue was fixed: - CVE-2022-2602: Fixed a local privilege escalation vulnerability involving Unix socket Garbage Collection and iouring bsc1205186...

Linux kernel io_uring Heap Buffer Overflow DoS

The vulnerability of the ioinstallfixedfile function in the iouring/filetable.c module of the iouring subsystem in the Linux kernel is related to the use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...