UBUNTU-CVE-2023-0468
Vulnerability Summary
Timeline
Description
A use-after-free flaw was found in io_uring/poll.c in io_poll_check_events in the io_uring subcomponent in the Linux Kernel due to a race condition of poll_refs. This flaw may cause a NULL pointer dereference.
CVSS Metrics
- v3.1•MEDIUM•Score: 4.7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Systems
- ubuntu•linux
< 5.15.0-67.74
- ubuntu•linux-aws
< 5.15.0-1031.35
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-5.11
all
- ubuntu•linux-aws-5.13
all
- ubuntu•linux-aws-5.15
< 5.15.0-1031.35~20.04.1
- ubuntu•linux-aws-5.3
all
- ubuntu•linux-aws-5.8
all
- ubuntu•linux-azure
all | < 5.15.0-1034.41
- ubuntu•linux-azure-5.11
all
- ubuntu•linux-azure-5.13
all
- ubuntu•linux-azure-5.15
< 5.15.0-1034.41~20.04.1
- ubuntu•linux-azure-5.19
< 5.19.0-1023.24~22.04.1
- ubuntu•linux-azure-5.3
all
- ubuntu•linux-azure-5.8
all
- ubuntu•linux-azure-edge
all
- ubuntu•linux-azure-fde
< 5.15.0-1034.41.1
- ubuntu•linux-azure-fde-5.15
< 5.15.0-1034.41~20.04.1.2
- ubuntu•linux-bluefield
< 5.15.0-1014.16 | < 5.15.0-1014.16
- ubuntu•linux-gcp
all | < 5.15.0-1030.37
- ubuntu•linux-gcp-5.11
all
- ubuntu•linux-gcp-5.13
all
- ubuntu•linux-gcp-5.15
< 5.15.0-1030.37~20.04.1
- ubuntu•linux-gcp-5.3
all
- ubuntu•linux-gcp-5.8
all
- ubuntu•linux-gke
< 5.15.0-1028.33
- ubuntu•linux-gke-4.15
all
- ubuntu•linux-gke-5.15
< 5.15.0-1028.33~20.04.1
- ubuntu•linux-gke-5.4
all
- ubuntu•linux-gkeop
< 5.15.0-1016.21
- ubuntu•linux-gkeop-5.15
< 5.15.0-1016.21~20.04.1
- ubuntu•linux-gkeop-5.4
all
- ubuntu•linux-hwe
all
- ubuntu•linux-hwe-5.11
all
- ubuntu•linux-hwe-5.13
all
- ubuntu•linux-hwe-5.15
< 5.15.0-67.74~20.04.1
- ubuntu•linux-hwe-5.19
< 5.19.0-40.41~22.04.1
- ubuntu•linux-hwe-5.8
all
- ubuntu•linux-hwe-edge
all
- ubuntu•linux-ibm
< 5.15.0-1026.29
- ubuntu•linux-intel-5.13
all
- ubuntu•linux-intel-iot-realtime
< 5.15.0-1022.27 | < 5.15.0-1022.27
- ubuntu•linux-intel-iotg
< 5.15.0-1026.31
- ubuntu•linux-intel-iotg-5.15
< 5.15.0-1026.31~20.04.1
- ubuntu•linux-kvm
< 5.15.0-1029.34
- ubuntu•linux-lowlatency
< 5.15.0-67.74
- ubuntu•linux-lowlatency-hwe-5.15
< 5.15.0-67.74~20.04.1
- ubuntu•linux-lowlatency-hwe-5.19
< 5.19.0-1022.23~22.04.1
- ubuntu•linux-nvidia
< 5.15.0-1023.23
- ubuntu•linux-oem
all
Showing first 50 affected entries in server-rendered view.
References (12)
- https://ubuntu.com/security/CVE-2023-0468
- https://git.kernel.org/linus/12ad3d2d6c5b0131a6052de91360849e3e154846
- https://git.kernel.org/linus/a26a35e9019fd70bf3cf647dcfdae87abc7bacea
- https://ubuntu.com/security/notices/USN-5912-1
- https://ubuntu.com/security/notices/USN-5935-1
- https://ubuntu.com/security/notices/USN-5938-1
- https://ubuntu.com/security/notices/USN-5941-1
- https://ubuntu.com/security/notices/USN-5962-1
- https://ubuntu.com/security/notices/USN-6024-1
- https://ubuntu.com/security/notices/USN-6071-1
- https://ubuntu.com/security/notices/USN-6072-1
- https://www.cve.org/CVERecord?id=CVE-2023-0468