CVE-2023-52895
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
21/08/2024
Last modified:
11/09/2024
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
io_uring/poll: don&#39;t reissue in case of poll race on multishot request<br />
<br />
A previous commit fixed a poll race that can occur, but it&#39;s only<br />
applicable for multishot requests. For a multishot request, we can safely<br />
ignore a spurious wakeup, as we never leave the waitqueue to begin with.<br />
<br />
A blunt reissue of a multishot armed request can cause us to leak a<br />
buffer, if they are ring provided. While this seems like a bug in itself,<br />
it&#39;s not really defined behavior to reissue a multishot request directly.<br />
It&#39;s less efficient to do so as well, and not required to rearm anything<br />
like it is for singleshot poll requests.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:6.1.7:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page