Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2023-52646— aio: fix mremap after fork null-deref

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于mm->ioctx_table设置为 NULL。

AI Predicted 7.8 Difficulty: Moderate EPSS 0.24% · P14

Affected Version Matrix 16

VendorProduct Version RangeStatus
Linux Linux e4a0d3e720e7e508749c1439b5ba3aff56c92976< 808f1e4b5723ae4eda724d2ad6f6638905eefd95 affected
e4a0d3e720e7e508749c1439b5ba3aff56c92976< d8dca1bfe9adcae38b35add64977818c0c13dd22 affected
e4a0d3e720e7e508749c1439b5ba3aff56c92976< 4326d0080f7e84fba775da41d158f46cf9d3f1c2 affected
e4a0d3e720e7e508749c1439b5ba3aff56c92976< c261f798f7baa8080cf0214081d43d5f86bb073f affected
e4a0d3e720e7e508749c1439b5ba3aff56c92976< 178993157e8c50aef7f35d7d6d3b44bb428199e1 affected
e4a0d3e720e7e508749c1439b5ba3aff56c92976< af126acf01a12bdb04986fd26fc2eb3b40249e0d affected
e4a0d3e720e7e508749c1439b5ba3aff56c92976< 81e9d6f8647650a7bead74c5f926e29970e834d1 affected
3.19 affected
… +8 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-52646

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
aio: fix mremap after fork null-deref
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: aio: fix mremap after fork null-deref Commit e4a0d3e720e7 ("aio: Make it possible to remap aio ring") introduced a null-deref if mremap is called on an old aio mapping after fork as mm->ioctx_table will be set to NULL. [jmoyer@redhat.com: fix 80 column issue]
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于mm->ioctx_table设置为 NULL。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux e4a0d3e720e7e508749c1439b5ba3aff56c92976 ~ 808f1e4b5723ae4eda724d2ad6f6638905eefd95 -
Linux Linux 3.19 -

II. Public POCs for CVE-2023-52646

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-52646

请登录查看更多情报信息。

Other References for CVE-2023-52646 (6)

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2023-52646

No comments yet

Leave a comment