CVE-2023-52654

In the Linux kernel, the following vulnerability has been resolved: io_uring/af_unix: disable sending io_uring over sockets File reference cycles have caused lots of problems for io_uring in the past, and it still doesn't work exactly right and races with unix_stream_read_generic(). The safest fix would be to completely disallow sending io_uring files via sockets via SCM_RIGHT, so there are no possible cycles invloving registered files and thus rendering SCM accounting on the io_uring side unnecessary.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc4:*:*:*:*:*:*

History

18 Sep 2025, 17:01

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 4.7
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc3:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/18824f592aad4124d79751bbc1500ea86ac3ff29 - () https://git.kernel.org/stable/c/18824f592aad4124d79751bbc1500ea86ac3ff29 - Patch
References () https://git.kernel.org/stable/c/3fe1ea5f921bf5b71cbfdc4469fb96c05936610e - () https://git.kernel.org/stable/c/3fe1ea5f921bf5b71cbfdc4469fb96c05936610e - Patch
References () https://git.kernel.org/stable/c/5a33d385eb36991a91e3dddb189d8679e2aac2be - () https://git.kernel.org/stable/c/5a33d385eb36991a91e3dddb189d8679e2aac2be - Patch
References () https://git.kernel.org/stable/c/705318a99a138c29a512a72c3e0043b3cd7f55f4 - () https://git.kernel.org/stable/c/705318a99a138c29a512a72c3e0043b3cd7f55f4 - Patch
References () https://git.kernel.org/stable/c/bcedd497b3b4a0be56f3adf7c7542720eced0792 - () https://git.kernel.org/stable/c/bcedd497b3b4a0be56f3adf7c7542720eced0792 - Patch
References () https://git.kernel.org/stable/c/f2f57f51b53be153a522300454ddb3887722fb2c - () https://git.kernel.org/stable/c/f2f57f51b53be153a522300454ddb3887722fb2c - Patch

21 Nov 2024, 08:40

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/18824f592aad4124d79751bbc1500ea86ac3ff29 - () https://git.kernel.org/stable/c/18824f592aad4124d79751bbc1500ea86ac3ff29 -
References () https://git.kernel.org/stable/c/3fe1ea5f921bf5b71cbfdc4469fb96c05936610e - () https://git.kernel.org/stable/c/3fe1ea5f921bf5b71cbfdc4469fb96c05936610e -
References () https://git.kernel.org/stable/c/5a33d385eb36991a91e3dddb189d8679e2aac2be - () https://git.kernel.org/stable/c/5a33d385eb36991a91e3dddb189d8679e2aac2be -
References () https://git.kernel.org/stable/c/705318a99a138c29a512a72c3e0043b3cd7f55f4 - () https://git.kernel.org/stable/c/705318a99a138c29a512a72c3e0043b3cd7f55f4 -
References () https://git.kernel.org/stable/c/bcedd497b3b4a0be56f3adf7c7542720eced0792 - () https://git.kernel.org/stable/c/bcedd497b3b4a0be56f3adf7c7542720eced0792 -
References () https://git.kernel.org/stable/c/f2f57f51b53be153a522300454ddb3887722fb2c - () https://git.kernel.org/stable/c/f2f57f51b53be153a522300454ddb3887722fb2c -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: io_uring/af_unix: deshabilita el envío de io_uring a través de sockets Los ciclos de referencia de archivos han causado muchos problemas para io_uring en el pasado, y todavía no funciona exactamente correctamente y corre con unix_stream_read_generic(). La solución más segura sería no permitir por completo el envío de archivos io_uring a través de sockets a través de SCM_RIGHT, de modo que no haya ciclos posibles que involucren archivos registrados y, por lo tanto, hagan innecesaria la contabilidad SCM en el lado io_uring.

14 May 2024, 14:23

Type Values Removed Values Added
New CVE

Information

Published : 2024-05-14 14:23

Updated : 2025-09-18 17:01


NVD link : CVE-2023-52654

Mitre link : CVE-2023-52654

CVE.ORG link : CVE-2023-52654


JSON object : View

Products Affected

linux

  • linux_kernel