Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Savino Dicanosa

#46342of 53,638
5.5Total CVSS
Vulnerabilities · 1
PT-2023-2064
5.5
2023-03-21
Linux · Linux Kernel · CVE-2023-1583
**Name of the Vulnerable Software and Affected Versions** Linux Kernel (affected versions not specified) **Description** A NULL pointer dereference was found in the `io file bitmap get` function in the `io uring/filetable.c` file of the Linux Kernel. This issue occurs when fixed files are unregistered and some context information, such as `file alloc {start,end}` and `alloc hint`, is not cleared. A subsequent request with auto index selection enabled via `IORING FILE INDEX ALLOC` can cause a NULL pointer dereference, allowing an unprivileged user to cause a system crash. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.