Log in Start free

Vulnerability · Published Apr 12, 2023 · Assigned by Google

CVE-2023-1872Use-after-free in Linux kernel's io_uring subsystem

High 7.8

In plain English

A high-severity use-after-free in Linux Kernel from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.3%top 76.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege escalation. The io_file_get_fixed function lacks the presence of ctx->uring_lock which can lead to a Use-After-Free vulnerability due a race condition with fixed files getting unregistered. We recommend upgrading past commit da24142b1ef9fd5d36b76e36bab328a5b27523e8.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux5.17.3-1DEBIAN-CVE-2023-1872
Debian:13linux5.17.3-1DEBIAN-CVE-2023-1872
Debian:14linux5.17.3-1DEBIAN-CVE-2023-1872
Ubuntu:22.04:LTSlinux5.15.0-71.78USN-6044-1
Ubuntu:22.04:LTSlinux5.15.0-71.78UBUNTU-CVE-2023-1872
Ubuntu:22.04:LTSlinux-aws5.15.0-1035.39USN-6044-1
Ubuntu:22.04:LTSlinux-aws5.15.0-1035.39UBUNTU-CVE-2023-1872
Ubuntu:22.04:LTSlinux-azure5.15.0-1037.44UBUNTU-CVE-2023-1872
Ubuntu:22.04:LTSlinux-azure5.15.0-1037.44USN-6044-1
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1037.44.1USN-6051-1
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1037.44.1UBUNTU-CVE-2023-1872
Ubuntu:22.04:LTSlinux-gcp5.15.0-1034.42UBUNTU-CVE-2023-1872
Ubuntu:22.04:LTSlinux-gke5.15.0-1032.37UBUNTU-CVE-2023-1872
Ubuntu:22.04:LTSlinux-gke5.15.0-1032.37USN-6044-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1019.24UBUNTU-CVE-2023-1872
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1019.24USN-6044-1
Ubuntu:22.04:LTSlinux-ibm5.15.0-1029.32USN-6044-1
Ubuntu:22.04:LTSlinux-ibm5.15.0-1029.32UBUNTU-CVE-2023-1872
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1030.35UBUNTU-CVE-2023-1872
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1030.35USN-6133-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1032.37USN-6051-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1032.37UBUNTU-CVE-2023-1872
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-71.78USN-6044-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-71.78UBUNTU-CVE-2023-1872
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1023.23UBUNTU-CVE-2023-1872
Ubuntu:22.04:LTSlinux-oem-5.175.17.0-1004.4UBUNTU-CVE-2023-1872
Ubuntu:22.04:LTSlinux-oracle5.15.0-1034.40UBUNTU-CVE-2023-1872
Ubuntu:22.04:LTSlinux-oracle5.15.0-1034.40USN-6044-1
Ubuntu:22.04:LTSlinux-raspi5.15.0-1028.30USN-6070-1
Ubuntu:22.04:LTSlinux-raspi5.15.0-1028.30UBUNTU-CVE-2023-1872
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-1872
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-1872
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-1872
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2023-1872

Affected products (as reported)

VendorProductVersions
Linux Linux Kernel 5.7 – through 5.17

Weakness: CWE-416 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References