CVE-2023-52926: io_uring/rw: split io_read() into a helper
In the Linux kernel, the following vulnerability has been resolved:
IORINGOPREAD did not correctly consume the provided buffer list when read i/o returned < 0 (except for -EAGAIN and -EIOCBQUEUED return). This can lead to a potential use-after-free when the completion via iorwdone runs at separate context.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52926?
CVE-2023-52926 has been classified as having a medium severity level due to the potential use-after-free issue.
How do I fix CVE-2023-52926?
To fix CVE-2023-52926, update your Linux kernel to the latest stable version that includes the patch for this vulnerability.
What systems are affected by CVE-2023-52926?
CVE-2023-52926 affects various versions of the Linux Kernel that implement the IORING_OP_READ operation.
Can CVE-2023-52926 be exploited remotely?
While CVE-2023-52926 is primarily a local vulnerability, it could be leveraged by an authenticated user to escalate privileges on a system.
What is the impact of CVE-2023-52926?
The impact of CVE-2023-52926 includes potential denial of service or data corruption due to the use-after-free condition.