CVE-2023-52654 - CVE House
Back to Database
Status published Unknown CVE-2023-52654

io_uring/af_unix: disable sending io_uring over sockets

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: io_uring/af_unix: disable sending io_uring over sockets File reference cycles have caused lots of problems for io_uring in the past, and it still doesn't work exactly right and races with unix_stream_read_generic(). The safest fix would be to completely disallow sending io_uring files via sockets via SCM_RIGHT, so there are no possible cycles invloving registered files and thus rendering SCM accounting on the io_uring side unnecessary.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-52654

Credits & Attribution

No credits recorded in the NVD database.

References

More from Linux

View All →
CVE-2025-71315
drm/vkms: Convert to DRM's vblank timer
Unknown 0
CVE-2025-71314
drm/panthor: Recover from panthor_gpu_flush_caches() failures
Unknown 0
CVE-2025-71313
PCI: endpoint: Add missing NULL check for alloc_workqueue()
Unknown 0
CVE-2025-71312
fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super()
Unknown 0
CVE-2025-71311
fs/ntfs3: Initialize new folios before use
Unknown 0

Affected Vendor

Affected Software

Linux
Vulnerable Versions:
04df9719df1865f6770af9bc7880874af0e594b2, c378c479c5175833bb22ff71974cda47d7b05401, 813d8fe5d30388f73a21d3a2bf46b0a1fd72498c, 0091bfc81741b8d3aeb3b7ab8636f911b2de6e80, b4293c01ee0d0ecdd3cb5801e13f62271144667a, 75e94c7e8859e58aadc15a98cc9704edff47d4f2, 5.4.220, 5.10.150, 5.15.75, 5.19.17, 6.0.3, 6.1, 0, 5.4.264, 5.10.204, 5.15.143, 6.1.68, 6.6.7, 6.7

Timeline

Official Publish: May 9th, 2024
Last Modified: May 23rd, 2026
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.