CVE-2023-2236

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A use-after-free vulnerability in the Linux Kernel io uring subsystem can be exploited to achieve local privilege escalation. Both io install fixed file and its callers call fput in a file in case of an error, causing a reference underflow which leads to a use-after-free vulnerability.

Recommendations Upgrade past commit 9d94c04c0db024922e886c9fd429659f22f48ea4 to resolve the issue. As a temporary workaround, consider restricting access to the io uring subsystem until a patch is available.