CVE-2023-0468

MEDIUM

4.7

CVSS Score

Published: January 25, 2023 at 12:00 AM UTC

Updated: June 17, 2026 at 05:25 AM UTC

2 products affected across 2 vendorsLinux KernelKernel

Using Kernel by N/A?

Get instant alerts when new vulnerabilities affect Kernel - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM4.7

Exploit prediction

EPSS 0.3%

SSVC

PoC

Description

A use-after-free flaw was found in io_uring/poll.c in io_poll_check_events in the io_uring subcomponent in the Linux Kernel due to a race condition of poll_refs. This flaw may cause a NULL pointer dereference.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v < 6.16.1 6.1 rc1 6.1 rc2 6.1 rc3 6.1 rc4 6.1 rc5 6.1 rc6

Affected range stops below 6.1, so it looks safe — our inference, not a vendor statement

Kernel · Red Hat

60%

Linux Kernel prior to Kernel 6.1 RC7

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://bugzilla.redhat.com/show_bug.cgi?id=2164024

References (1)

ExploitIssue TrackingPatchThird Party Advisory

Source: [email protected]

https://bugzilla.redhat.com/show_bug.cgi?id=2164024

SSVC — Action Prioritization

SSVCPoCNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

4.7MEDIUMCISA-ADP

Attack Vector: LOCAL
Complexity: HIGH
Privileges: LOW
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: NONE
Integrity: NONE
Availability: HIGH

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-416

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card