CVE-2023-52654
published 2024-05-14CVE-2023-52654: In the Linux kernel, the following vulnerability has been resolved: io_uring/af_unix: disable sending io_uring over sockets File reference cycles have caused…
PriorityP418medium4.7CVSS 3.1
AVLACHPRLUINSUCNINAH
EPSS
0.89%
56.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
io_uring/af_unix: disable sending io_uring over sockets
File reference cycles have caused lots of problems for io_uring
in the past, and it still doesn't work exactly right and races with
unix_stream_read_generic(). The safest fix would be to completely
disallow sending io_uring files via sockets via SCM_RIGHT, so there
are no possible cycles invloving registered files and thus rendering
SCM accounting on the io_uring side unnecessary.
Affected
33 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.69-1 (bookworm) | linux 6.1.69-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 0091bfc81741b8d3aeb3b7ab8636f911b2de6e80 < f2f57f51b53be153a522300454ddb3887722fb2c | f2f57f51b53be153a522300454ddb3887722fb2c |
| linux | linux | >= 0091bfc81741b8d3aeb3b7ab8636f911b2de6e80 < 5a33d385eb36991a91e3dddb189d8679e2aac2be | 5a33d385eb36991a91e3dddb189d8679e2aac2be |
| linux | linux | >= 0091bfc81741b8d3aeb3b7ab8636f911b2de6e80 < 705318a99a138c29a512a72c3e0043b3cd7f55f4 | 705318a99a138c29a512a72c3e0043b3cd7f55f4 |
| linux | linux | >= 04df9719df1865f6770af9bc7880874af0e594b2 < 18824f592aad4124d79751bbc1500ea86ac3ff29 | 18824f592aad4124d79751bbc1500ea86ac3ff29 |
| linux | linux | >= 5.10.150 < 5.10.204 | 5.10.204 |
| linux | linux | >= 5.15.75 < 5.15.143 | 5.15.143 |
| linux | linux | >= 5.19.17 < 5.20 | 5.20 |
| linux | linux | >= 5.4.220 < 5.4.264 | 5.4.264 |
| linux | linux | >= 6.0.3 < 6.1 | 6.1 |
| linux | linux | >= 813d8fe5d30388f73a21d3a2bf46b0a1fd72498c < bcedd497b3b4a0be56f3adf7c7542720eced0792 | bcedd497b3b4a0be56f3adf7c7542720eced0792 |
| linux | linux | >= c378c479c5175833bb22ff71974cda47d7b05401 < 3fe1ea5f921bf5b71cbfdc4469fb96c05936610e | 3fe1ea5f921bf5b71cbfdc4469fb96c05936610e |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.205-1 | 5.10.205-1 |
| linux | linux_kernel | >= 0 < 6.1.69-1 | 6.1.69-1 |
| linux | linux_kernel | >= 0 < 6.6.8-1 | 6.6.8-1 |
| linux | linux_kernel | >= 0 < 6.6.8-1 | 6.6.8-1 |
| linux | linux_kernel | >= 5.10.150 < 5.10.204 | 5.10.204 |
| linux | linux_kernel | >= 5.15.75 < 5.15.143 | 5.15.143 |
CVSS provenance
nvdv3.14.7MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
osv4.7MEDIUM
vendor_msrc5.5MEDIUM
vendor_debian4.7MEDIUM
vendor_redhat4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens SINEC OS
cisa_ics·2025-08-14
Siemens SINEC OS
ICS Advisory
##
Siemens SINEC OS
Release DateAugust 14, 2025
Alert CodeICSA-25-226-15
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3.1 9.1
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: RUGGEDCOM, SCALANCE
- Vulnerabilities: NULL Pointer Dereference, Use After Free, Unchecked Input for Loop Condition, Out-of-bounds Write, Ou
Microsoft
io_uring/af_unix: disable sending io_uring over sockets
vendor_msrc·2024-05-14·CVSS 5.5
CVE-2023-52654 [MEDIUM] io_uring/af_unix: disable sending io_uring over sockets
io_uring/af_unix: disable sending io_uring over sockets
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
Linux: Linux
Customer Action Required: Yes
Remediation: CBL-Mariner Releases
Reference: https://learn
Red Hat
kernel: io_uring: drop any code related to SCM_RIGHTS
vendor_redhat·2024-05-13·CVSS 4.7
CVE-2023-52656 [MEDIUM] kernel: io_uring: drop any code related to SCM_RIGHTS
kernel: io_uring: drop any code related to SCM_RIGHTS
In the Linux kernel, the following vulnerability has been resolved:
io_uring: drop any code related to SCM_RIGHTS
This is dead code after we dropped support for passing io_uring fds
over SCM_RIGHTS, get rid of it.
A flaw was found in the Linux kernel that addresses the removal of dead code related to `SCM_RIGHTS` support within the `io_uring`. This code was deemed unnecessary after the kernel dropped the ability to pass `io_uring` file descriptors over `SCM_RIGHTS`. The vulnerability was assigned CVE status due to removing this code, which was part of a cleanup process following the resolution of a previous CVE (CVE-2023-52654).
Mitigation: Mitigation for this issue is either not available or the currently available options do not me
Red Hat
kernel: io_uring/af_unix: disable sending io_uring over sockets
vendor_redhat·2024-05-08·CVSS 4.7
CVE-2023-52654 [MEDIUM] kernel: io_uring/af_unix: disable sending io_uring over sockets
kernel: io_uring/af_unix: disable sending io_uring over sockets
In the Linux kernel, the following vulnerability has been resolved:
io_uring/af_unix: disable sending io_uring over sockets
File reference cycles have caused lots of problems for io_uring
in the past, and it still doesn't work exactly right and races with
unix_stream_read_generic(). The safest fix would be to completely
disallow sending io_uring files via sockets via SCM_RIGHT, so there
are no possible cycles invloving registered files and thus rendering
SCM accounting on the io_uring side unnecessary.
A security vulnerability was identified in the Linux kernel's io_uring subsystem, specifically related to the handling of file descriptors over UNIX domain sockets. The issue arises from the potential for file reference cycles
Debian
CVE-2023-52654: linux - In the Linux kernel, the following vulnerability has been resolved: io_uring/af...
vendor_debian·2023·CVSS 4.7
CVE-2023-52654 [MEDIUM] CVE-2023-52654: linux - In the Linux kernel, the following vulnerability has been resolved: io_uring/af...
In the Linux kernel, the following vulnerability has been resolved: io_uring/af_unix: disable sending io_uring over sockets File reference cycles have caused lots of problems for io_uring in the past, and it still doesn't work exactly right and races with unix_stream_read_generic(). The safest fix would be to completely disallow sending io_uring files via sockets via SCM_RIGHT, so there are no possible cycles invloving registered files and thus rendering SCM accounting on the io_uring side unnecessary.
Scope: local
bookworm: resolved (fixed in 6.1.69-1)
bullseye: resolved (fixed in 5.10.205-1)
forky: resolved (fixed in 6.6.8-1)
sid: resolved (fixed in 6.6.8-1)
trixie: resolved (fixed in 6.6.8-1)
OSV
CVE-2023-52654: In the Linux kernel, the following vulnerability has been resolved: io_uring/af_unix: disable sending io_uring over sockets File reference cycles have
osv·2024-05-14·CVSS 4.7
CVE-2023-52654 [MEDIUM] CVE-2023-52654: In the Linux kernel, the following vulnerability has been resolved: io_uring/af_unix: disable sending io_uring over sockets File reference cycles have
In the Linux kernel, the following vulnerability has been resolved: io_uring/af_unix: disable sending io_uring over sockets File reference cycles have caused lots of problems for io_uring in the past, and it still doesn't work exactly right and races with unix_stream_read_generic(). The safest fix would be to completely disallow sending io_uring files via sockets via SCM_RIGHT, so there are no possible cycles invloving registered files and thus rendering SCM accounting on the io_uring side unnecessary.
GHSA
GHSA-p435-prrh-xm57: In the Linux kernel, the following vulnerability has been resolved:
io_uring/af_unix: disable sending io_uring over sockets
File reference cycles ha
ghsa_unreviewed·2024-05-14
CVE-2023-52654 [MEDIUM] GHSA-p435-prrh-xm57: In the Linux kernel, the following vulnerability has been resolved:
io_uring/af_unix: disable sending io_uring over sockets
File reference cycles ha
In the Linux kernel, the following vulnerability has been resolved:
io_uring/af_unix: disable sending io_uring over sockets
File reference cycles have caused lots of problems for io_uring
in the past, and it still doesn't work exactly right and races with
unix_stream_read_generic(). The safest fix would be to completely
disallow sending io_uring files via sockets via SCM_RIGHT, so there
are no possible cycles invloving registered files and thus rendering
SCM accounting on the io_uring side unnecessary.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/18824f592aad4124d79751bbc1500ea86ac3ff29https://git.kernel.org/stable/c/3fe1ea5f921bf5b71cbfdc4469fb96c05936610ehttps://git.kernel.org/stable/c/5a33d385eb36991a91e3dddb189d8679e2aac2behttps://git.kernel.org/stable/c/705318a99a138c29a512a72c3e0043b3cd7f55f4https://git.kernel.org/stable/c/bcedd497b3b4a0be56f3adf7c7542720eced0792https://git.kernel.org/stable/c/f2f57f51b53be153a522300454ddb3887722fb2chttps://git.kernel.org/stable/c/18824f592aad4124d79751bbc1500ea86ac3ff29https://git.kernel.org/stable/c/3fe1ea5f921bf5b71cbfdc4469fb96c05936610ehttps://git.kernel.org/stable/c/5a33d385eb36991a91e3dddb189d8679e2aac2behttps://git.kernel.org/stable/c/705318a99a138c29a512a72c3e0043b3cd7f55f4https://git.kernel.org/stable/c/bcedd497b3b4a0be56f3adf7c7542720eced0792https://git.kernel.org/stable/c/f2f57f51b53be153a522300454ddb3887722fb2c
2024-05-14
Published