CVE-2023-1032

MEDIUM

Linux Kernel 5.19-6.3 - Double Free in io_uring IORING_OP_SOCKET Operation

Title source: llm
STIX 2.1

Description

The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file net/socket.c. This issue was introduced in da214a475f8bd1d3e9e7a19ddfeb4d1617551bab and fixed in 649c15c7691e9b13cbe9bf6c65c365350e056067.

References (5)

Core 5
Core References
Mailing List, Third Party Advisory issue-tracking
https://www.openwall.com/lists/oss-security/2023/03/13/2
Third Party Advisory third-party-advisory
https://ubuntu.com/security/notices/USN-6033-1
Third Party Advisory third-party-advisory
https://ubuntu.com/security/notices/USN-6024-1
Third Party Advisory third-party-advisory
https://ubuntu.com/security/notices/USN-5977-1

Scores

CVSS v3 4.7
EPSS 0.0006
EPSS Percentile 20.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-415
Status published
Products (4)
canonical/ubuntu_linux 22.04
canonical/ubuntu_linux 22.10
linux/linux_kernel 6.3 rc1
linux/linux_kernel 5.19 - 6.3
Published Jan 08, 2024
Tracked Since Feb 18, 2026