Kernel: file reference underflow problem in io_uring/filetable in io_install_fixed_file
Published Jan 25, 2023
5.5
MEDIUMCVSS 3.1
EPSS 0.32%
Description
A use-after-free flaw was found in io_uring/filetable.c in io_install_fixed_file in the io_uring subcomponent in the Linux Kernel during call cleanup. This flaw may lead to a denial of service.
Affected products
- Vendor n/a Product Kernel Defaultunknown
Affected
- Linux Kernel prior t oKernel 6.1 RC7
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| n/a | Kernel | unknown | Affected
|
- < 6.1
- 6.1
- 6.1
- 6.1
- 6.1
- 6.1
- 6.1
- 6.1
No data.
Red Hat Enterprise Linux 6
kernel
Not affected
Red Hat Enterprise Linux 7
kernel
Not affected
Red Hat Enterprise Linux 7
kernel-rt
Not affected
Red Hat Enterprise Linux 8
kernel
Not affected
Red Hat Enterprise Linux 8
kernel-rt
Not affected
Red Hat Enterprise Linux 9
kernel
Not affected
Red Hat Enterprise Linux 9
kernel-rt
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel-rt | Not affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
There is no shipped kernel version seen affected by this problem. These files are not built into our source code.
References (6)
- https://access.redhat.com/security/cve/CVE-2023-0469 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2163723 ExploitIssue TrackingPatchThird Party Advisory
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-12523 Advisory
- https://kernel.googlesource.com/pub/scm/linux/kernel/git/stable/linux-stable/+/9d94c04c0db024922e886c9fd429659f22f48ea4
- https://nvd.nist.gov/vuln/detail/CVE-2023-0469
- https://www.cve.org/CVERecord?id=CVE-2023-0469
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2023-0469 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2163723 | ExploitIssue TrackingPatchThird Party Advisory | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-12523 | Advisory | |
| https://kernel.googlesource.com/pub/scm/linux/kernel/git/stable/linux-stable/+/9d94c04c0db024922e886c9fd429659f22f48ea4 | ||
| https://nvd.nist.gov/vuln/detail/CVE-2023-0469 | ||
| https://www.cve.org/CVERecord?id=CVE-2023-0469 |
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
GitHub
No data