https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 21:36:26 +0000 https://vulnerability.circl.lu/vuln/cve-2023-2430 <p><strong>Affected:</strong> kernel</p> <p>A vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in io_uring.c in Linux Kernel. This flaw allows a local attacker with user privilege to trigger a Denial of Service threat.</p> <p><strong>Affected:</strong> kernel</p> <p>A vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in io_uring.c in Linux Kernel. This flaw allows a local attacker with user privilege to trigger a Denial of Service threat.</p> https://vulnerability.circl.lu/vuln/cve-2023-2430 https://vulnerability.circl.lu/vuln/usn-6192-1 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: linux-allwinner-5.19, Ubuntu:22.04:LTS: linux-aws-5.19, Ubuntu:22.04:LTS: linux-gcp-5.19, Ubuntu:22.04:LTS: linux-hwe-5.19, Ubuntu:22.04:LTS: linux-starfive-5.19</p> <p>Hangyu Hua discovered that the Flower classifier implementation in the Linux kernel contained an out-of-bounds write vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-35788, LP: #2023577)</p> <p>Xingyuan Mo and Gengjia Chen discovered that the io_uring subsystem in the Linux kernel did not properly handle locking when IOPOLL mode is being used. A local attacker could use this to cause a denial of service (system crash). (CVE-2023-2430)</p> <p>It was discovered that for some Intel processors the INVLPG instruction implementation did not properly flush global TLB entries when PCIDs are enabled. An attacker could use this to expose sensitive information (kernel memory) or possibly cause undesired behaviors. (LP: #2023220)</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: linux-allwinner-5.19, Ubuntu:22.04:LTS: linux-aws-5.19, Ubuntu:22.04:LTS: linux-gcp-5.19, Ubuntu:22.04:LTS: linux-hwe-5.19, Ubuntu:22.04:LTS: linux-starfive-5.19</p> <p>Hangyu Hua discovered that the Flower classifier implementation in the Linux kernel contained an out-of-bounds write vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-35788, LP: #2023577)</p> <p>Xingyuan Mo and Gengjia Chen discovered that the io_uring subsystem in the Linux kernel did not properly handle locking when IOPOLL mode is being used. A local attacker could use this to cause a denial of service (system crash). (CVE-2023-2430)</p> <p>It was discovered that for some Intel processors the INVLPG instruction implementation did not properly flush global TLB entries when PCIDs are enabled. An attacker could use this to expose sensitive information (kernel memory) or possibly cause undesired behaviors. (LP: #2023220)</p> https://vulnerability.circl.lu/vuln/usn-6192-1