CVE-2023-52895— io_uring/poll: don't reissue in case of poll race on multishot request
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-52895
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
io_uring/poll: don't reissue in case of poll race on multishot request
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: don't reissue in case of poll race on multishot request A previous commit fixed a poll race that can occur, but it's only applicable for multishot requests. For a multishot request, we can safely ignore a spurious wakeup, as we never leave the waitqueue to begin with. A blunt reissue of a multishot armed request can cause us to leak a buffer, if they are ring provided. While this seems like a bug in itself, it's not really defined behavior to reissue a multishot request directly. It's less efficient to do so as well, and not required to rearm anything like it is for singleshot poll requests.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于 io_uring/poll 组件在处理多射击请求时不应重新发出请求。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2023-52895
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-52895
请登录查看更多情报信息。
Same Patch Batch · Linux · 2024-08-21 · 69 CVEs total
| CVE-2022-48876 | wifi: mac80211: fix initialization of rx->link and rx->link_sta | |
| CVE-2024-43874 | crypto: ccp - Fix null pointer dereference in __sev_snp_shutdown_locked | |
| CVE-2024-43873 | vhost/vsock: always initialize seqpacket_allow | |
| CVE-2024-43875 | PCI: endpoint: Clean up error handling in vpci_scan_bus() | |
| CVE-2022-48870 | tty: fix possible null-ptr-defer in spk_ttyio_release | |
| CVE-2022-48871 | tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer | |
| CVE-2022-48872 | misc: fastrpc: Fix use-after-free race condition for maps | |
| CVE-2022-48873 | misc: fastrpc: Don't remove map on creater_process and device_release | |
| CVE-2022-48874 | misc: fastrpc: Fix use-after-free and race in fastrpc_map_find | |
| CVE-2022-48875 | wifi: mac80211: sdata can be NULL during AMPDU start | |
| CVE-2022-48869 | USB: gadgetfs: Fix race between mounting and unmounting | |
| CVE-2022-48877 | f2fs: let's avoid panic if extent_tree is not created | |
| CVE-2022-48878 | Bluetooth: hci_qca: Fix driver shutdown on closed serdev | |
| CVE-2022-48879 | efi: fix NULL-deref in init error path | |
| CVE-2022-48880 | platform/surface: aggregator: Add missing call to ssam_request_sync_free() | |
| CVE-2022-48881 | platform/x86/amd: Fix refcount leak in amd_pmc_probe | |
| CVE-2022-48882 | net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY) | |
| CVE-2022-48883 | net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent | |
| CVE-2022-48884 | net/mlx5: Fix command stats access after free | |
| CVE-2022-48885 | ice: Fix potential memory leak in ice_gnss_tty_write() |
Showing top 20 of 69 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
Same vendor: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
V. Comments for CVE-2023-52895
No comments yet