CVE-2023-1032

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version containing the fix for the issue introduced in da214a475f8bd1d3e9e7a19ddfeb4d1617551bab and fixed in 649c15c7691e9b13cbe9bf6c65c365350e056067

Description The issue is related to a double free in the sys socket file() function, which can be exploited to cause a denial of service. The problem is associated with the io uring IORING OP SOCKET operation in the Linux kernel.

Recommendations For Linux kernel versions prior to the fix, consider disabling the sys socket file() function as a temporary workaround until a patch is available. Restrict access to the io uring IORING OP SOCKET operation to minimize the risk of exploitation. Update to a version of the Linux kernel that contains the fix for the issue introduced in da214a475f8bd1d3e9e7a19ddfeb4d1617551bab and fixed in 649c15c7691e9b13cbe9bf6c65c365350e056067.