CVE-2023-52926
24.02.2025, 09:15
In the Linux kernel, the following vulnerability has been resolved: IORING_OP_READ did not correctly consume the provided buffer list when read i/o returned < 0 (except for -EAGAIN and -EIOCBQUEUED return). This can lead to a potential use-after-free when the completion via io_rw_done runs at separate context.Enginsight
Vendor | Product | Version |
---|---|---|
linux | linux_kernel | 5.1 ≤ 𝑥 < 6.1.122 |
linux | linux_kernel | 6.2 ≤ 𝑥 < 6.6.68 |
𝑥
= Vulnerable software versions

Debian Releases
Common Weakness Enumeration