CVE-2023-1032: Double Free
Last updated 24 July 2024
Other sources
The Linux kernel iouring IORINGOPSOCKET operation contained a double free in function syssocketfile() in file net/socket.c. This issue was introduced in da214a475f8bd1d3e9e7a19ddfeb4d1617551bab and fixed in 649c15c7691e9b13cbe9bf6c65c365350e056067.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-1032?
CVE-2023-1032 is classified as a high-severity vulnerability due to the potential for exploitation of a double free condition.
How do I fix CVE-2023-1032?
To fix CVE-2023-1032, update your Linux kernel to a version that includes the patch for this vulnerability, such as 5.10.223-1 or newer.
Which versions of the Linux kernel are affected by CVE-2023-1032?
CVE-2023-1032 affects Linux kernel versions from 5.19 to 6.3, including 6.3-rc1.
What specific functionality is impacted by CVE-2023-1032?
CVE-2023-1032 impacts the io_uring IORING_OP_SOCKET operation within the Linux kernel.
Is CVE-2023-1032 relevant to Ubuntu users?
Yes, Ubuntu versions 22.04 and 22.10 are affected by CVE-2023-1032 and should be updated accordingly.