PT-2023-2682

CVE-2023-2430

·

Published

2023-01-19

·

Updated

2025-03-06

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)
Description A vulnerability was found due to a missing lock for the IOPOLL flaw in the io cqring event overflow() function in io uring.c. This flaw allows a local attacker with user privilege to trigger a Denial of Service threat. The vulnerability is related to incorrect resource locking, which may also allow an attacker to elevate privileges.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2024-14046
ALT-PU-2024-6818
AZL-27759
DSA-5492-1
OPENSUSE-SU-2023_2871-1
OPENSUSE-SU-2023_2892-1
OPENSUSE-SU-2023_3302-1
SUSE-SU-2023:2871-1
SUSE-SU-2023:2892-1
SUSE-SU-2023:3302-1
USN-6192-1
USN-6194-1
USN-6235-1
Found an issue in the description? Have something to add? Feel free to write us 👾