CVE-2023-52439: uio: Fix use-after-free in uio_open

Q: What is the severity of CVE-2023-52439?

CVE-2023-52439 has a moderate severity level due to its potential for a use-after-free vulnerability in the Linux kernel.

Q: How do I fix CVE-2023-52439?

To fix CVE-2023-52439, upgrade to a patched version of the Linux kernel such as 5.10.223-1 or higher.

Q: Which versions of the Linux kernel are affected by CVE-2023-52439?

CVE-2023-52439 affects Linux kernel versions from 4.18.0 to 6.6.13, excluding version 5.10.223 and higher.

Q: Can CVE-2023-52439 be exploited remotely?

CVE-2023-52439 may allow local users to gain elevated privileges, but it does not appear to be exploitable remotely.

Q: What components of the Linux kernel are impacted by CVE-2023-52439?

CVE-2023-52439 impacts the User Input/Output (uio) subsystem within the Linux kernel.

Published Feb 20, 2024

Updated

In the Linux kernel, the following vulnerability has been resolved:

uio: Fix use-after-free in uioopen

core-1 core-2 ------------------------------------------------------- uiounregisterdevice uioopen idev = idrfind() deviceunregister(&idev->dev) putdevice(&idev->dev) uiodevicerelease getdevice(&idev->dev) kfree(idev) uiofreeminor(minor) uiorelease putdevice(&idev->dev) kfree(idev) -------------------------------------------------------

In the core-1 uiounregisterdevice(), the deviceunregister will kfree idev when the idev->dev kobject ref is 1. But after core-1 deviceunregister, putdevice and before doing kfree, the core-2 may getdevice. Then: 1. After core-1 kfree idev, the core-2 will do use-after-free for idev. 2. When core-2 do uiorelease and putdevice, the idev will be double freed.

To address this issue, we can get idev atomic & inc idev reference with minorlock.

Affected Software

183 affected componentsFixes available

IBM Security Verify Governance<=ISVG 10.0.2

IBM Security Verify Governance, Identity Manager Software Stack<=ISVG 10.0.2

IBM Security Verify Governance, Identity Manager Virtual Appliance<=ISVG 10.0.2

IBM Security Verify Governance Identity Manager Container<=ISVG 10.0.2

debian/linux

5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1

Linux Linux kernel>4.18.0<4.19.306

Linux Linux kernel>=4.20.0<5.4.268

Linux Linux kernel>=5.5.0<5.10.209

Linux Linux kernel>=5.11.0<5.15.148

Linux Linux kernel>=5.16.0<6.1.74

Linux Linux kernel>=6.2.0<6.6.13

Linux Linux kernel>=6.7.0<6.7.1

Linux Linux kernel=4.18

Linux Linux kernel=4.18-rc5

Linux Linux kernel=4.18-rc6

Linux Linux kernel=4.18-rc7

Linux Linux kernel=4.18-rc8

linux/kernel>=4.18.0<4.19.306

4.19.306

linux/kernel>=4.20.0<5.4.268

5.4.268

linux/kernel>=5.5.0<5.10.209

5.10.209

linux/kernel>=5.11.0<5.15.148

5.15.148

linux/kernel>=5.16.0<6.1.74

6.1.74

linux/kernel>=6.2.0<6.6.13

6.6.13

linux/kernel>=6.7.0<6.7.1

6.7.1

ubuntu/linux-azure<4.15.0-1177.192~14.04.1

4.15.0-1177.192~14.04.1

ubuntu/linux-aws-hwe<4.15.0-1168.181~16.04.1

4.15.0-1168.181~16.04.1

ubuntu/linux-azure<4.15.0-1177.192~16.04.1

4.15.0-1177.192~16.04.1

ubuntu/linux-gcp<4.15.0-1162.179~16.04.1

4.15.0-1162.179~16.04.1

ubuntu/linux-hwe<4.15.0-225.237~16.04.1

4.15.0-225.237~16.04.1

ubuntu/linux-oracle<4.15.0-1131.142~16.04.1

4.15.0-1131.142~16.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux<4.15.0-225.237

4.15.0-225.237

ubuntu/linux-aws<4.15.0-1168.181

4.15.0-1168.181

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-aws-5.4<5.4.0-1122.132~18.04.1

5.4.0-1122.132~18.04.1

ubuntu/linux-azure*

ubuntu/linux-azure-4.15<4.15.0-1177.192

4.15.0-1177.192

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-5.4<5.4.0-1127.134~18.04.1

5.4.0-1127.134~18.04.1

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-4.15<4.15.0-1162.179

4.15.0-1162.179

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-5.4<5.4.0-1126.135~18.04.1

5.4.0-1126.135~18.04.1

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-5.4<5.4.0-175.195~18.04.1

5.4.0-175.195~18.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-ibm-5.4<5.4.0-1069.74~18.04.1

5.4.0-1069.74~18.04.1

ubuntu/linux-kvm<4.15.0-1152.157

4.15.0-1152.157

ubuntu/linux-oem*

ubuntu/linux-oracle<4.15.0-1131.142

4.15.0-1131.142

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-oracle-5.4<5.4.0-1121.130~18.04.1

5.4.0-1121.130~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1106.118~18.04.1

5.4.0-1106.118~18.04.1

ubuntu/linux-aws-fips<4.15.0-2107.113

4.15.0-2107.113

ubuntu/linux-azure-fips<4.15.0-2086.92

4.15.0-2086.92

ubuntu/linux-fips<4.15.0-1123.134

4.15.0-1123.134

ubuntu/linux-gcp-fips<4.15.0-2070.75

4.15.0-2070.75

ubuntu/linux-fips*

ubuntu/linux<5.4.0-176.196

5.4.0-176.196

ubuntu/linux-aws<5.4.0-1122.132

5.4.0-1122.132

ubuntu/linux-aws-5.15<5.15.0-1057.63~20.04.1

5.15.0-1057.63~20.04.1

ubuntu/linux-azure<5.4.0-1127.134

5.4.0-1127.134

ubuntu/linux-azure-5.15<5.15.0-1060.69~20.04.1

5.15.0-1060.69~20.04.1

ubuntu/linux-bluefield<5.4.0-1082.89

5.4.0-1082.89

ubuntu/linux-gcp<5.4.0-1126.135

5.4.0-1126.135

ubuntu/linux-gcp-5.15<5.15.0-1055.63~20.04.1

5.15.0-1055.63~20.04.1

ubuntu/linux-gkeop<5.4.0-1089.93

5.4.0-1089.93

ubuntu/linux-gkeop-5.15<5.15.0-1040.46~20.04.1

5.15.0-1040.46~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-102.112~20.04.1

5.15.0-102.112~20.04.1

ubuntu/linux-ibm<5.4.0-1069.74

5.4.0-1069.74

ubuntu/linux-ibm-5.15<5.15.0-1050.53~20.04.1

5.15.0-1050.53~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1052.58~20.04.1

5.15.0-1052.58~20.04.1

ubuntu/linux-iot<5.4.0-1034.35

5.4.0-1034.35

ubuntu/linux-kvm<5.4.0-1110.117

5.4.0-1110.117

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-102.112~20.04.1

5.15.0-102.112~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1025.25~20.04.1

5.15.0-1025.25~20.04.1

ubuntu/linux-oracle<5.4.0-1121.130

5.4.0-1121.130

ubuntu/linux-oracle-5.15<5.15.0-1055.61~20.04.1

5.15.0-1055.61~20.04.1

ubuntu/linux-raspi<5.4.0-1106.118

5.4.0-1106.118

ubuntu/linux-riscv-5.15<5.15.0-1053.57~20.04.1

5.15.0-1053.57~20.04.1

ubuntu/linux-xilinx-zynqmp<5.4.0-1041.45

5.4.0-1041.45

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-aws-fips<5.4.0-1122.132+fips1

5.4.0-1122.132+fips1

ubuntu/linux-azure-fips<5.4.0-1127.134+fips1

5.4.0-1127.134+fips1

ubuntu/linux-fips<5.4.0-1096.106

5.4.0-1096.106

ubuntu/linux-gcp-fips<5.4.0-1126.135+fips1

5.4.0-1126.135+fips1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.15.0-102.112

5.15.0-102.112

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1057.63

5.15.0-1057.63

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-azure<5.15.0-1060.69

5.15.0-1060.69

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-fde<5.15.0-1060.69.1

5.15.0-1060.69.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1055.63

5.15.0-1055.63

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gke<5.15.0-1054.59

5.15.0-1054.59

ubuntu/linux-gkeop<5.15.0-1040.46

5.15.0-1040.46

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-ibm<5.15.0-1050.53

5.15.0-1050.53

ubuntu/linux-intel-iotg<5.15.0-1052.58

5.15.0-1052.58

ubuntu/linux-kvm<5.15.0-1054.59

5.15.0-1054.59

ubuntu/linux-lowlatency<5.15.0-102.112

5.15.0-102.112

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-nvidia<5.15.0-1048.48

5.15.0-1048.48

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5<6.5.0-1014.14

6.5.0-1014.14

ubuntu/linux-nvidia-tegra<5.15.0-1025.25

5.15.0-1025.25

ubuntu/linux-nvidia-tegra-igx<5.15.0-1012.12

5.15.0-1012.12

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1<6.1.0-1035.35

6.1.0-1035.35

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1055.61

5.15.0-1055.61

ubuntu/linux-oracle-6.5*

ubuntu/linux-raspi<5.15.0-1050.53

5.15.0-1050.53

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-xilinx-zynqmp<5.15.0-1030.34

5.15.0-1030.34

ubuntu/linux-bluefield<5.15.0-1040.42

5.15.0-1040.42

ubuntu/linux-intel-iot-realtime<5.15.0-1050.52

5.15.0-1050.52

ubuntu/linux-realtime<5.15.0-1058.66

5.15.0-1058.66

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips<5.15.0-1057.63+fips1

5.15.0-1057.63+fips1

ubuntu/linux-azure-fips<5.15.0-1060.69+fips1

5.15.0-1060.69+fips1

ubuntu/linux-fips<5.15.0-102.112+fips1

5.15.0-102.112+fips1

ubuntu/linux-gcp-fips<5.15.0-1055.63+fips2

5.15.0-1055.63+fips2

ubuntu/linux-raspi-realtime<6.8.0-2001.1

6.8.0-2001.1

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 4.19.306
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.4.268
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.10.209
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.15.148
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.1.74
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.6.13
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.7.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1177.192~14.04.1
Upgrade
Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-1168.181~16.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1177.192~16.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.15.0-1162.179~16.04.1
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-225.237~16.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1131.142~16.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.15.0-225.237
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.15.0-1168.181
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1122.132~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1177.192
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1127.134~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1162.179
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1126.135~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-175.195~18.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1069.74~18.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.15.0-1152.157
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1131.142
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1121.130~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1106.118~18.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2107.113
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2086.92
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-1123.134
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2070.75
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-176.196
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1122.132
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1057.63~20.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1127.134
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1060.69~20.04.1
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1082.89
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1126.135
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1055.63~20.04.1
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.4.0-1089.93
Upgrade
Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1040.46~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-102.112~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1069.74
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.53~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1052.58~20.04.1
Upgrade
Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.
Fixed in 5.4.0-1034.35
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1110.117
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-102.112~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1025.25~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1121.130
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1055.61~20.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1106.118
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1053.57~20.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.4.0-1041.45
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1122.132+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1127.134+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1096.106
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1126.135+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-102.112
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1057.63
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1060.69
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1060.69.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1055.63
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1054.59
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1040.46
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.53
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1052.58
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1054.59
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-102.112
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1048.48
Upgrade
Upgrade ubuntu/linux-nvidia-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-1014.14
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1025.25
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1012.12
Upgrade
Upgrade ubuntu/linux-oem-6.1 to a version that resolves this vulnerability.
Fixed in 6.1.0-1035.35
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1055.61
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.53
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1030.34
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1040.42
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.52
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1058.66
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1057.63+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1060.69+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-102.112+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1055.63+fips2
Upgrade
Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.
Fixed in 6.8.0-2001.1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch git.kernel.org/stable/c/0c9ae0b8605078eafc3bea053cc78791e97ba2e2
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch git.kernel.org/stable/c/17a8519cb359c3b483fb5c7367efa9a8a508bdea
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch git.kernel.org/stable/c/3174e0f7de1ba392dc191625da83df02d695b60c
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch git.kernel.org/stable/c/35f102607054faafe78d2a6994b18d5d9d6e92ad
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch git.kernel.org/stable/c/5cf604ee538ed0c467abe3b4cda5308a6398f0f7
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch git.kernel.org/stable/c/5e0be1229ae199ebb90b33102f74a0f22d152570
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch git.kernel.org/stable/c/913205930da6213305616ac539447702eaa85e41
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch git.kernel.org/stable/c/e93da893d52d82d57fc0db2ca566024e0f26ff50

Event History

Feb 20, 2024

CVE Published

via MITRE·06:34 PM

Data Sourced

via MITRE·06:34 PM

DescriptionSeverity

Data Sourced

via OSV·06:34 PM

DescriptionSeverityAffected Software

Data Sourced

via NVD·09:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Feb 21, 2024

Data Sourced

via Red Hat·08:50 AM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-7230443

Frequently Asked Questions

What is the severity of CVE-2023-52439?

CVE-2023-52439 has a moderate severity level due to its potential for a use-after-free vulnerability in the Linux kernel.

How do I fix CVE-2023-52439?

To fix CVE-2023-52439, upgrade to a patched version of the Linux kernel such as 5.10.223-1 or higher.

Which versions of the Linux kernel are affected by CVE-2023-52439?

CVE-2023-52439 affects Linux kernel versions from 4.18.0 to 6.6.13, excluding version 5.10.223 and higher.

Can CVE-2023-52439 be exploited remotely?

CVE-2023-52439 may allow local users to gain elevated privileges, but it does not appear to be exploitable remotely.

What components of the Linux kernel are impacted by CVE-2023-52439?

CVE-2023-52439 impacts the User Input/Output (uio) subsystem within the Linux kernel.

CVE-2023-52439: uio: Fix use-after-free in uio_open

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

What is the severity of CVE-2023-52439?

How do I fix CVE-2023-52439?

Which versions of the Linux kernel are affected by CVE-2023-52439?

Can CVE-2023-52439 be exploited remotely?

What components of the Linux kernel are impacted by CVE-2023-52439?

Company

Resources

Contact