CVE-2023-52926

A flaw was found in the Linux kernel's io_uring/rw component. The IORING_OP_READ operation did not correctly manage the provided buffer list when read input/output (I/O) operations returned an error. This could potentially lead to a use-after-free vulnerability, where memory is accessed after it has been freed, which might cause system instability or crashes.

The patch 72060434a14caea20925e492310d6e680e3f9007 that is the reason of this issue doesn't lead to any vulnerability. Leaving with Low security impact for now, but could be rejected later based on more analyses.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.