Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Tobias Holl

#32214of 53,635
7.8Total CVSS
Vulnerabilities · 1
PT-2023-2762
7.8
2023-05-03
Linux · Linux Kernel · CVE-2023-2598
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** A flaw was found in the fixed buffer registration code for io uring (io sqe buffer register in io uring/rsrc.c) in the Linux kernel that allows out-of-bounds access to physical memory beyond the end of the buffer. This flaw enables full local privilege escalation. The issue is related to the io uring subsystem and can lead to out-of-bounds read/write access to physical memory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.