CVE-2023-2598

State: Published
Severity: 7.8 High
Published: Jun 1, 2023
Updated: Apr 23, 2025
Reserved: May 9, 2023

Description

A flaw was found in the fixed buffer registration code for io_uring (io_sqe_buffer_register in io_uring/rsrc.c) in the Linux kernel that allows out-of-bounds access to physical memory beyond the end of the buffer. This flaw enables full local privilege escalation.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416

Affected Products

Product	Versions
Kerneln/a	Kernel prior to 6.4-rc1Affected

References

https://www.openwall.com/lists/oss-security/2023/05/08/3
https://security.netapp.com/advisory/ntap-20230703-0006/
[oss-security] 20240424 CVE-2024-0582 - Linux kernel use-after-free vulnerability in io_uring, writeup and exploit strategymailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.