PoC Index

CVE-2023-52654

HIGH 7.8EPSS 0.9%

In the Linux kernel, the following vulnerability has been resolved:io_uring/af_unix: disable sending io_uring over socketsFile reference cycles have caused lots of problems for io_uringin the past, and it still doesn't work exactly right and races withunix_stream_read_generic(). The safest fix would be to completelydisallow sending io_uring files via sockets via SCM_RIGHT, so thereare no possible cycles invloving registered files and thus renderingSCM accounting on the io_uring side unnecessary.

CVSS v3.1
4.7 MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v3.1
7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.89% chance of exploitation in the next 30 days, 57th percentile
Published
2024-05-09
Updated
2026-08-05

Proof-of-concept exploits (1)

References

Related