PT-2023-2682 · Linux+4 · Linux Kernel+4

Xingyuan Mo · Publicado 2023-01-19 · Atualizado 2025-03-06 · CVE-2023-2430

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A vulnerability was found due to a missing lock for the IOPOLL flaw in the io cqring event overflow() function in io uring.c. This flaw allows a local attacker with user privilege to trigger a Denial of Service threat. The vulnerability is related to incorrect resource locking, which may also allow an attacker to elevate privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Locking

Enumeração de Fraquezas

CWE-413

CWE-667

Identificadores relacionados

ALT-PU-2024-14046

ALT-PU-2024-6818

AZL-27759

BDU:2023-02522

CVE-2023-2430

DSA-5492-1

OPENSUSE-SU-2023_2871-1

OPENSUSE-SU-2023_2892-1

OPENSUSE-SU-2023_3302-1

SUSE-SU-2023:2871-1

SUSE-SU-2023:2892-1

SUSE-SU-2023:3302-1

USN-6192-1

USN-6194-1

USN-6235-1

Produtos afetados

Alt Linux

Linux Kernel

Linuxmint

Suse

Ubuntu

Referências · 689

• https://bugzilla.suse.com/1172073 · Nota
• https://bugzilla.suse.com/1208600 · Nota
• https://suse.com/security/cve/CVE-2022-40982 · Nota
• https://bugzilla.suse.com/1207878 · Nota
• https://suse.com/security/cve/CVE-2023-33288 · Nota
• https://suse.com/security/cve/CVE-2022-4269 · Nota
• https://osv.dev/vulnerability/USN-6194-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2023-35823 · Nota
• https://bugzilla.suse.com/1213036 · Nota
• https://bugzilla.suse.com/1203906 · Nota
• https://suse.com/security/cve/CVE-2023-31436 · Nota
• https://bugzilla.suse.com/1213287 · Nota
• https://bugzilla.suse.com/1211105 · Nota
• https://bugzilla.suse.com/1207621 · Nota
• https://bugzilla.suse.com/1206459 · Nota