Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-52926

io_uring/rw: split io_read() into a helper

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: IORING_OP_READ did not correctly consume the provided buffer list when read i/o returned < 0 (except for -EAGAIN and -EIOCBQUEUED return). This can lead to a potential use-after-free when the completion via io_rw_done runs at separate context.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2b188cc1bb857a9d4701ae59aa7768b5124e262e to < 72060434a14caea20925e492310d6e680e3f9007affected
  • 2b188cc1bb857a9d4701ae59aa7768b5124e262e to < 6c27fc6a783c8a77c756dd5461b15e465020d075affected
  • 2b188cc1bb857a9d4701ae59aa7768b5124e262e to < a08d195b586a217d76b42062f88f375a3eedda4daffected

Linux Linux

Default version status: affected

  • 5.1affected
  • 0 to < 5.1unaffected
  • 6.1.122 to ≤ 6.1.*unaffected
  • 6.6.68 to ≤ 6.6.*unaffected
  • 6.7 to ≤ *unaffected

References