CVE-2023-52656

CVE-2023-52656

High · published May 14, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
22.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

io_uring: drop any code related to SCM_RIGHTS

This is dead code after we dropped support for passing io_uring fds

over SCM_RIGHTS, get rid of it.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00308 · 22.4th percentile
Published
2024-05-14T18:23Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 5.1, < 5.4.2735.4.273
linux/linux_kernel≥ 5.5, < 5.10.2145.10.214
linux/linux_kernel≥ 5.11, < 5.15.1535.15.153
linux/linux_kernel≥ 5.16, < 6.1.836.1.83
linux/linux_kernel≥ 6.2, < 6.6.236.6.23
linux/linux_kernel≥ 6.7, < 6.7.116.7.11
debian/debian_linuxall versions—
References (14)
https://git.kernel.org/stable/c/6e5e6d274956305f1fc0340522b38f5f5be74bdb · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6fc19b3d8a45ff0e5d50ec8184cee1d5eac1a8ba · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/88c49d9c896143cdc0f77197c4dcf24140375e89 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a3812a47a32022ca76bf46ddacdd823dc2aabf8b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a6771f343af90a25f3a14911634562bb5621df02 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/cfb24022bb2c31f1f555dc6bc3cc5e2547446fb3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d909d381c3152393421403be4b6435f17a2378b4 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6e5e6d274956305f1fc0340522b38f5f5be74bdb · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/88c49d9c896143cdc0f77197c4dcf24140375e89 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/a3812a47a32022ca76bf46ddacdd823dc2aabf8b · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/a6771f343af90a25f3a14911634562bb5621df02 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/cfb24022bb2c31f1f555dc6bc3cc5e2547446fb3 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/d909d381c3152393421403be4b6435f17a2378b4 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 13 MAY 13:12Z
    io_uring: drop any code related to SCM_RIGHTS
    cvelistv5