High severity7.8NVD Advisory· Published Apr 12, 2023· Updated Jun 17, 2026

CVE-2023-1872

Description

A use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege escalation.

The io_file_get_fixed function lacks the presence of ctx->uring_lock which can lead to a Use-After-Free vulnerability due a race condition with fixed files getting unregistered.

We recommend upgrading past commit da24142b1ef9fd5d36b76e36bab328a5b27523e8.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

111

Linux/Kernelllm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 5.7
Linux/io_uringllm-create
osv-coords108 versions
pkg:rpm/opensuse/dtb-aarch64&distro=openSUSE%20Leap%2015.4 pkg:rpm/suse/kernel-64kb&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-default-base&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/kernel-default-base&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3 pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kernel-default-base&distro=SUSE%20Manager%20Proxy%204.2 pkg:rpm/suse/kernel-default-base&distro=SUSE%20Manager%20Server%204.2 pkg:rpm/suse/kernel-default&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/kernel-default&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP2 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP3 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP3 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kernel-default&distro=SUSE%20Manager%20Proxy%204.2 pkg:rpm/suse/kernel-default&distro=SUSE%20Manager%20Server%204.2 pkg:rpm/suse/kernel-docs&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/kernel-docs&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3 pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kernel-livepatch-SLE15-SP2_Update_29&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2 pkg:rpm/suse/kernel-livepatch-SLE15-SP2_Update_32&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2 pkg:rpm/suse/kernel-livepatch-SLE15-SP2_Update_35&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2 pkg:rpm/suse/kernel-livepatch-SLE15-SP2_Update_36&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2 pkg:rpm/suse/kernel-livepatch-SLE15-SP3_Update_19&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP3 pkg:rpm/suse/kernel-livepatch-SLE15-SP3_Update_23&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP3 pkg:rpm/suse/kernel-livepatch-SLE15-SP3_Update_28&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP3 pkg:rpm/suse/kernel-livepatch-SLE15-SP3_Update_31&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP3 pkg:rpm/suse/kernel-livepatch-SLE15-SP3_Update_32&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP3 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kernel-preempt&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/kernel-preempt&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3 pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kernel-preempt&distro=SUSE%20Manager%20Proxy%204.2 pkg:rpm/suse/kernel-preempt&distro=SUSE%20Manager%20Server%204.2 pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Real%20Time%20Module%2015%20SP3 pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/kernel-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP3 pkg:rpm/suse/kernel-source&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/kernel-source&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kernel-source&distro=SUSE%20Manager%20Proxy%204.2 pkg:rpm/suse/kernel-source&distro=SUSE%20Manager%20Server%204.2 pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP3 pkg:rpm/suse/kernel-syms&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/kernel-syms&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP3 pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Manager%20Server%204.2
< 5.3.18-150300.59.121.1+ 107 more
- (no CPE)range: < 5.3.18-150300.59.121.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150200.24.151.1.150200.9.73.1
- (no CPE)range: < 5.3.18-150300.59.121.2.150300.18.70.2
- (no CPE)range: < 5.3.18-150200.24.151.1.150200.9.73.1
- (no CPE)range: < 5.3.18-150300.59.121.2.150300.18.70.2
- (no CPE)range: < 5.3.18-150300.59.121.2.150300.18.70.2
- (no CPE)range: < 5.3.18-150300.59.121.2.150300.18.70.2
- (no CPE)range: < 5.3.18-150300.59.121.2.150300.18.70.2
- (no CPE)range: < 5.3.18-150300.59.121.2.150300.18.70.2
- (no CPE)range: < 5.3.18-150200.24.151.1.150200.9.73.1
- (no CPE)range: < 5.3.18-150300.59.121.2.150300.18.70.2
- (no CPE)range: < 5.3.18-150200.24.151.1.150200.9.73.1
- (no CPE)range: < 5.3.18-150300.59.121.2.150300.18.70.2
- (no CPE)range: < 5.3.18-150300.59.121.2.150300.18.70.2
- (no CPE)range: < 5.3.18-150300.59.121.2.150300.18.70.2
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 11-150200.2.3
- (no CPE)range: < 5-150200.2.3
- (no CPE)range: < 2-150200.2.3
- (no CPE)range: < 1-150200.5.3.1
- (no CPE)range: < 14-150300.2.3
- (no CPE)range: < 11-150300.2.3
- (no CPE)range: < 5-150300.2.3
- (no CPE)range: < 2-150300.2.3
- (no CPE)range: < 1-150300.7.3.2
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.127.1
- (no CPE)range: < 5.3.18-150300.127.1
- (no CPE)range: < 5.3.18-150300.127.1
- (no CPE)range: < 5.3.18-150300.127.1
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.127.1
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.1
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.1
- (no CPE)range: < 5.3.18-150300.59.121.1
- (no CPE)range: < 5.3.18-150300.59.121.1
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.1
- (no CPE)range: < 5.3.18-150200.24.151.1
- (no CPE)range: < 5.3.18-150300.59.121.1
- (no CPE)range: < 5.3.18-150300.127.1
- (no CPE)range: < 5.3.18-150300.59.121.2
- (no CPE)range: < 5.3.18-150300.59.121.2

Patches

Vulnerability mechanics

References

git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/nvdMailing ListPatch
packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.htmlnvdThird Party AdvisoryVDB Entry
lists.debian.org/debian-lts-announce/2023/05/msg00005.htmlnvdThird Party Advisory
security.netapp.com/advisory/ntap-20230601-0002/nvdThird Party Advisory
git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/nvdMailing ListProduct

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000