CVE-2023-3389

HighCVSS 7.8/10Last modified Oct 14, 2026

Description

A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation.

Racing a io_uring cancel poll request with a linked timeout can cause a UAF in a hrtimer.

We recommend upgrading past commit ef7dfac51d8ed961b742218f526bd589f3900a59 (4716c73b188566865bdd79c3a6709696a224ac04 for 5.10 stable and 0e388fce7aec40992eadee654193cad345d62663 for 5.15 stable).

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Jun 28, 2023
Last modified
Oct 14, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-338905.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privCVE-2023-338915.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privCVE-2023-338925.5In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution priviCVE-2023-338935.5In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution priviCVE-2023-338945.5In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution priviCVE-2023-338955.5In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution priviCVE-2023-338964.4In libimpl-ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysteCVE-2023-338974.4In libimpl-ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysteCVE-2023-338985.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privCVE-2023-338995.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privCVE-2023-33907.8A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c. Mishandled error handlCVE-2023-339005.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution priv
CVE-2023-3389: High severity, CVSS 7.8 | Vulnix