Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-2430

Опубликовано: 23 июл. 2023
Источник: nvd
CVSS3: 5.5
EPSS Низкий

Описание

A vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in io_uring.c in Linux Kernel. This flaw allows a local attacker with user privilege to trigger a Denial of Service threat.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия до 6.2 (исключая)
cpe:2.3:o:linux:linux_kernel:6.2:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*

EPSS

Процентиль: 2%
0.00012
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-413
CWE-667

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 2 лет назад

A vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in io_uring.c in Linux Kernel. This flaw allows a local attacker with user privilege to trigger a Denial of Service threat.

CVSS3: 6.6
redhat
около 3 лет назад

A vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in io_uring.c in Linux Kernel. This flaw allows a local attacker with user privilege to trigger a Denial of Service threat.

CVSS3: 5.5
msrc
больше 2 лет назад

A vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in io_uring.c in Linux Kernel. This flaw allows a local attacker with user privilege to trigger a Denial of Service threat.

CVSS3: 5.5
debian
больше 2 лет назад

A vulnerability was found due to missing lock for IOPOLL flaw in io_cq ...

CVSS3: 5.5
github
больше 2 лет назад

A vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in io_uring.c in Linux Kernel. This flaw allows a local attacker with user privilege to trigger a Denial of Service threat.

EPSS

Процентиль: 2%
0.00012
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-413
CWE-667