CVE-2024-0582: Linux Kernel: serbest bırakılmış belleğin kullanımı

Açıklama (NVD)

A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and then frees it. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Özet bilgiler

Ürün

Linux Linux Kernel

CVSS v3.1

7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

%12,84 (yüzdelik 96)

CWE

CWE-416

Yama

Mevcut

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• access.redhat.com
• bugs.chromium.org
• bugzilla.redhat.com
• git.kernel.org
• www.openwall.com
• access.redhat.com
• bugs.chromium.org
• bugzilla.redhat.com
• git.kernel.org
• CWE-416