CVE-2023-52656

medium

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring: drop any code related to SCM_RIGHTS This is dead code after we dropped support for passing io_uring fds over SCM_RIGHTS, get rid of it.

References

https://cloud.google.com/support/bulletins/index#gcp-2024-041

https://git.kernel.org/stable/c/d909d381c3152393421403be4b6435f17a2378b4

https://git.kernel.org/stable/c/cfb24022bb2c31f1f555dc6bc3cc5e2547446fb3

https://git.kernel.org/stable/c/a6771f343af90a25f3a14911634562bb5621df02

https://git.kernel.org/stable/c/a3812a47a32022ca76bf46ddacdd823dc2aabf8b

https://git.kernel.org/stable/c/88c49d9c896143cdc0f77197c4dcf24140375e89

https://git.kernel.org/stable/c/6e5e6d274956305f1fc0340522b38f5f5be74bdb

Details

Source: Mitre, NVD

Published: 2024-05-14

Updated: 2024-11-04

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H