A flaw was found in the fixed buffer registration code for io_uring (io_sqe_buffer_register in io_uring/rsrc.c) in the Linux kernel that allows out-of-bounds access to physical memory beyond the end of the buffer. This flaw enables full local privilege escalation.
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2024/04/24/3 | |
| https://security.netapp.com/advisory/ntap-20230703-0006/ | Third Party Advisory |
| https://www.openwall.com/lists/oss-security/2023/05/08/3 | Mailing List Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2024/04/24/3 | |
| https://security.netapp.com/advisory/ntap-20230703-0006/ | Third Party Advisory |
| https://www.openwall.com/lists/oss-security/2023/05/08/3 | Mailing List Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 07:58
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.openwall.com/lists/oss-security/2024/04/24/3 - | |
| References | () https://security.netapp.com/advisory/ntap-20230703-0006/ - Third Party Advisory | |
| References | () https://www.openwall.com/lists/oss-security/2023/05/08/3 - Mailing List, Third Party Advisory |
01 May 2024, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2023-06-01 01:15
Updated : 2025-04-23 17:16
NVD link : CVE-2023-2598
Mitre link : CVE-2023-2598
CVE.ORG link : CVE-2023-2598
JSON object : View
Products Affected
linux
- linux_kernel
netapp
- hci_baseboard_management_controller