VYPR
Medium severity5.5NVD Advisory· Published Aug 21, 2024· Updated Jun 17, 2026

CVE-2023-52895

CVE-2023-52895

Description

In the Linux kernel, the following vulnerability has been resolved:

io_uring/poll: don't reissue in case of poll race on multishot request

A previous commit fixed a poll race that can occur, but it's only applicable for multishot requests. For a multishot request, we can safely ignore a spurious wakeup, as we never leave the waitqueue to begin with.

A blunt reissue of a multishot armed request can cause us to leak a buffer, if they are ring provided. While this seems like a bug in itself, it's not really defined behavior to reissue a multishot request directly. It's less efficient to do so as well, and not required to rearm anything like it is for singleshot poll requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Linux/Kernelllm-fuzzy3 versions
    (expand)+ 2 more
    • (no CPE)
    • cpe:2.3:o:linux:linux_kernel:6.1.7:*:*:*:*:*:*:*
    • (no CPE)range: 6.1.7
  • osv-coords
    Range: >= 6.1.7, < 6.1.8

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.