Vulnerability Description
The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file net/socket.c. This issue was introduced in da214a475f8bd1d3e9e7a19ddfeb4d1617551bab and fixed in 649c15c7691e9b13cbe9bf6c65c365350e056067.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.19, < 6.3 |
| Canonical | Ubuntu Linux | 22.04 |
Related Weaknesses (CWE)
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1032Third Party Advisory
- https://ubuntu.com/security/notices/USN-5977-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-6024-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-6033-1Third Party Advisory
- https://www.openwall.com/lists/oss-security/2023/03/13/2Mailing ListThird Party Advisory
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1032Third Party Advisory
- https://ubuntu.com/security/notices/USN-5977-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-6024-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-6033-1Third Party Advisory
- https://www.openwall.com/lists/oss-security/2023/03/13/2Mailing ListThird Party Advisory
FAQ
What is CVE-2023-1032?
CVE-2023-1032 is a vulnerability with a CVSS score of 4.7 (MEDIUM). The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file net/socket.c. This issue was introduced in da214a475f8bd1d3e9e7a19ddfeb4d1617551bab...
How severe is CVE-2023-1032?
CVE-2023-1032 has been rated MEDIUM with a CVSS base score of 4.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-1032?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Canonical Ubuntu Linux.