VDB

GSD-2023-2236

GSD-2023-2236 PUBLISHED CVSS 7.800000190734863 HIGH

A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Both io_install_fixed_file and its callers call fput in a file in case of an error, causing a reference underflow which leads to a use-after-free vulnerability. We recommend upgrading past commit 9d94c04c0db024922e886c9fd429659f22f48ea4.

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
LinuxLinux Kernel5.19

Timeline

  • Mar 4, 2025 PoC Published
  • Apr 21, 2026 CVE Published

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›