ID:9671 - Exploit for Out-of-bounds read in Linux kernel - CVE-2023-2598

Link to public exploit:

Vulnerability description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the io_sqe_buffer_register() function in io_uring/rsrc.c. A local user can trigger an out-of-bounds read error and read contents of memory on the system.

Remediation