CVE-2023-2598

Published: 1 June 2023

A flaw was found in the fixed buffer registration code for io_uring (io_sqe_buffer_register in io_uring/rsrc.c) in the Linux kernel that allows out-of-bounds access to physical memory beyond the end of the buffer. This flaw enables full local privilege escalation.

Notes

original commit only present in upstream 6.3-rc1 and later
which is newer than all ubuntu kernels at this time, hence they are all
not-affected

Status

Severity score breakdown

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2598
• https://www.openwall.com/lists/oss-security/2023/05/09/2
• https://www.openwall.com/lists/oss-security/2023/05/08/3
• NVD
• Launchpad
• Debian