CVE-2023-52654

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52654
In the Linux kernel, the following vulnerability has been resolved: io_uring/af_unix: disable sending io_uring over sockets File reference cycles have caused lots of problems for io_uring in the past, and it still doesn't work exactly right and races with unix_stream_read_generic(). The safest fix would be to completely disallow sending io_uring files via sockets via SCM_RIGHT, so there are no possible cycles invloving registered files and thus rendering SCM accounting on the io_uring side unnecessary.

4.7 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/18824f592aad4124d79751bbc1500ea86ac3ff29 Patch
https://git.kernel.org/stable/c/3fe1ea5f921bf5b71cbfdc4469fb96c05936610e Patch
https://git.kernel.org/stable/c/5a33d385eb36991a91e3dddb189d8679e2aac2be Patch
https://git.kernel.org/stable/c/705318a99a138c29a512a72c3e0043b3cd7f55f4 Patch
https://git.kernel.org/stable/c/bcedd497b3b4a0be56f3adf7c7542720eced0792 Patch
https://git.kernel.org/stable/c/f2f57f51b53be153a522300454ddb3887722fb2c Patch
https://git.kernel.org/stable/c/18824f592aad4124d79751bbc1500ea86ac3ff29 Patch
https://git.kernel.org/stable/c/3fe1ea5f921bf5b71cbfdc4469fb96c05936610e Patch
https://git.kernel.org/stable/c/5a33d385eb36991a91e3dddb189d8679e2aac2be Patch
https://git.kernel.org/stable/c/705318a99a138c29a512a72c3e0043b3cd7f55f4 Patch
https://git.kernel.org/stable/c/bcedd497b3b4a0be56f3adf7c7542720eced0792 Patch
https://git.kernel.org/stable/c/f2f57f51b53be153a522300454ddb3887722fb2c Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc4:*:*:*:*:*:*
History

18 Sep 2025, 17:01

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.7
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/18824f592aad4124d79751bbc1500ea86ac3ff29 - () https://git.kernel.org/stable/c/18824f592aad4124d79751bbc1500ea86ac3ff29 - Patch
References () https://git.kernel.org/stable/c/3fe1ea5f921bf5b71cbfdc4469fb96c05936610e - () https://git.kernel.org/stable/c/3fe1ea5f921bf5b71cbfdc4469fb96c05936610e - Patch
References () https://git.kernel.org/stable/c/5a33d385eb36991a91e3dddb189d8679e2aac2be - () https://git.kernel.org/stable/c/5a33d385eb36991a91e3dddb189d8679e2aac2be - Patch
References () https://git.kernel.org/stable/c/705318a99a138c29a512a72c3e0043b3cd7f55f4 - () https://git.kernel.org/stable/c/705318a99a138c29a512a72c3e0043b3cd7f55f4 - Patch
References () https://git.kernel.org/stable/c/bcedd497b3b4a0be56f3adf7c7542720eced0792 - () https://git.kernel.org/stable/c/bcedd497b3b4a0be56f3adf7c7542720eced0792 - Patch
References () https://git.kernel.org/stable/c/f2f57f51b53be153a522300454ddb3887722fb2c - () https://git.kernel.org/stable/c/f2f57f51b53be153a522300454ddb3887722fb2c - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc3:*:*:*:*:*:*

21 Nov 2024, 08:40

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/18824f592aad4124d79751bbc1500ea86ac3ff29 - () https://git.kernel.org/stable/c/18824f592aad4124d79751bbc1500ea86ac3ff29 -
References () https://git.kernel.org/stable/c/3fe1ea5f921bf5b71cbfdc4469fb96c05936610e - () https://git.kernel.org/stable/c/3fe1ea5f921bf5b71cbfdc4469fb96c05936610e -
References () https://git.kernel.org/stable/c/5a33d385eb36991a91e3dddb189d8679e2aac2be - () https://git.kernel.org/stable/c/5a33d385eb36991a91e3dddb189d8679e2aac2be -
References () https://git.kernel.org/stable/c/705318a99a138c29a512a72c3e0043b3cd7f55f4 - () https://git.kernel.org/stable/c/705318a99a138c29a512a72c3e0043b3cd7f55f4 -
References () https://git.kernel.org/stable/c/bcedd497b3b4a0be56f3adf7c7542720eced0792 - () https://git.kernel.org/stable/c/bcedd497b3b4a0be56f3adf7c7542720eced0792 -
References () https://git.kernel.org/stable/c/f2f57f51b53be153a522300454ddb3887722fb2c - () https://git.kernel.org/stable/c/f2f57f51b53be153a522300454ddb3887722fb2c -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: io_uring/af_unix: deshabilita el envío de io_uring a través de sockets Los ciclos de referencia de archivos han causado muchos problemas para io_uring en el pasado, y todavía no funciona exactamente correctamente y corre con unix_stream_read_generic(). La solución más segura sería no permitir por completo el envío de archivos io_uring a través de sockets a través de SCM_RIGHT, de modo que no haya ciclos posibles que involucren archivos registrados y, por lo tanto, hagan innecesaria la contabilidad SCM en el lado io_uring.

14 May 2024, 14:23

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-14 14:23

Updated : 2025-09-18 17:01

NVD link : CVE-2023-52654

Mitre link : CVE-2023-52654

CVE.ORG link : CVE-2023-52654

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo