VDB

UBUNTU-CVE-2023-2430

UBUNTU-CVE-2023-2430 PUBLISHED CVSS 5.5 MEDIUM

Record from OSV · Published May 8, 2023

A vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in io_uring.c in Linux Kernel. This flaw allows a local attacker with user privilege to trigger a Denial of Service threat.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
linux-oem-6.1Ubuntu:22.04:LTS6.1.0-1015.15
linux-aws-5.19Ubuntu:22.04:LTS5.19.0-1028.29~22.04.1
linux-riscv-5.19Ubuntu:22.04:LTS5.19.0-1021.23~22.04.1
linux-lowlatency-hwe-5.19Ubuntu:22.04:LTS5.19.0-1028.29~22.04.1
linux-allwinner-5.19Ubuntu:22.04:LTS5.19.0-1015.15~22.04.1
linux-hwe-5.19Ubuntu:22.04:LTS5.19.0-46.47~22.04.1
linux-gcp-5.19Ubuntu:22.04:LTS5.19.0-1027.29~22.04.1
linux-starfive-5.19Ubuntu:22.04:LTS5.19.0-1020.22~22.04.1
linux-oem-6.0Ubuntu:22.04:LTS6.0.0-1019.19

Risk scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

VendorProductVersions
Ubuntu:20.04:LTSlinux-riscv-5.115.11.0-1015.16~20.04.1, 5.11.0-1031.35, 5.11.0-1030.34
Ubuntu:20.04:LTSlinux-intel-5.130, 5.13.0-1007.7, 5.13.0-1008.8
Ubuntu:22.04:LTSlinux-oem-6.16.1.0-1013.13, 6.1.0-1014.14, 6.1.0-1012.12
Ubuntu:18.04:LTSlinux-azure-edge5.0.0-1012.12~18.04.2, 4.18.0-1006.6~18.04.1, 4.18.0-1008.8~18.04.1
Ubuntu:20.04:LTSlinux-oracle-5.135.13.0-1021.26~20.04.1, 5.13.0-1025.30~20.04.1, 5.13.0-1027.32~20.04.1
Ubuntu:18.04:LTSlinux-gke-4.154.15.0-1063.66, 4.15.0-1059.62, 4.15.0-1058.61
Ubuntu:18.04:LTSlinux-hwe-edge5.3.0-24.26~18.04.2, 5.3.0-23.25~18.04.2, 5.3.0-23.25~18.04.1
Ubuntu:18.04:LTSlinux-azure-5.35.3.0-1010.11~18.04.1, 5.3.0-1009.10~18.04.1, 5.3.0-1008.9~18.04.1
Ubuntu:22.04:LTSlinux-azure-5.195.19.0-1025.28~22.04.1, 5.19.0-1021.22~22.04.1, 5.19.0-1020.21~22.04.1
Ubuntu:22.04:LTSlinux-aws-5.195.19.0-1025.26~22.04.1, 5.19.0-1024.25~22.04.1, 5.19.0-1026.27~22.04.1
Ubuntu:20.04:LTSlinux-azure-5.80, 5.8.0-1043.46~20.04.1, 5.8.0-1042.45~20.04.1
Ubuntu:22.04:LTSlinux-azure-fde-5.195.19.0-1026.29~22.04.1.1, 0, 5.19.0-1027.30~22.04.2.1
Ubuntu:20.04:LTSlinux-riscv5.4.0-34.38, 5.4.0-33.37, 5.4.0-31.35
Ubuntu:20.04:LTSlinux-hwe-5.85.8.0-50.56~20.04.1, 0, 5.8.0-23.24~20.04.1
Ubuntu:20.04:LTSlinux-riscv-5.85.8.0-29.31~20.04.1, 5.8.0-14.16~20.04.1, 0
Ubuntu:20.04:LTSlinux-aws-5.135.13.0-1023.25~20.04.1, 5.13.0-1025.27~20.04.1, 5.13.0-1028.31~20.04.1
Ubuntu:20.04:LTSlinux-oem-5.135.13.0-1026.32, 5.13.0-1028.35, 5.13.0-1029.36
Ubuntu:18.04:LTSlinux-gcp4.15.0-1001.1, 5.0.0-1034.35, 5.0.0-1033.34
Ubuntu:20.04:LTSlinux-oracle-5.85.8.0-1034.35~20.04.2, 5.8.0-1033.34~20.04.1, 5.8.0-1031.32~20.04.2
Ubuntu:22.04:LTSlinux-riscv-5.195.19.0-1019.21~22.04.1, 5.19.0-1020.22~22.04.1, 0

…and 32 more

Timeline

  • May 8, 2023 CVE Published
  • Feb 4, 2026 CVE Updated
  • Oct 31, 2026 Distribution Patch (3 in total, the first dated here)
  • Oct 31, 2026 Security Advisory (3 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln UBUNTU-CVE-2023-2430
vulnetix vdb fixes UBUNTU-CVE-2023-2430

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/UBUNTU-CVE-2023-2430/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›