Linux Kernel I/O Operation Buffer Handling Vulnerability
CVE-2023-52926

7.8HIGH

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
24 February 2025

What is CVE-2023-52926?

A buffer handling issue has been discovered in the Linux kernel's I/O operations. The vulnerability arises during I/O reads when the IORING_OP_READ command does not correctly manage the provided buffer list if the read returns a negative value (other than -EAGAIN or -EIOCBQUEUED). This malfunction can potentially lead to a use-after-free situation if completion runs in a separate context, posing a risk for system integrity and stability. It is crucial for users of affected Linux kernel versions to apply the latest patches to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Linux 2b188cc1bb857a9d4701ae59aa7768b5124e262e < 72060434a14caea20925e492310d6e680e3f9007

Linux 2b188cc1bb857a9d4701ae59aa7768b5124e262e < 6c27fc6a783c8a77c756dd5461b15e465020d075

Linux 2b188cc1bb857a9d4701ae59aa7768b5124e262e

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.