Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Thadeu Cascardo

#50290of 53,635
4.7Total CVSS
Vulnerabilities · 1
PT-2023-1705
4.7
2023-03-08
Linux · Linux Kernel · CVE-2023-1032
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to the version containing the fix for the issue introduced in da214a475f8bd1d3e9e7a19ddfeb4d1617551bab and fixed in 649c15c7691e9b13cbe9bf6c65c365350e056067 **Description** The issue is related to a double free in the ` sys socket file()` function, which can be exploited to cause a denial of service. The problem is associated with the io uring IORING OP SOCKET operation in the Linux kernel. **Recommendations** For Linux kernel versions prior to the fix, consider disabling the ` sys socket file()` function as a temporary workaround until a patch is available. Restrict access to the io uring IORING OP SOCKET operation to minimize the risk of exploitation. Update to a version of the Linux kernel that contains the fix for the issue introduced in da214a475f8bd1d3e9e7a19ddfeb4d1617551bab and fixed in 649c15c7691e9b13cbe9bf6c65c365350e056067.