description: The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file net/socket.c. This issue was introduced in da214a475f8bd1d3e9e7a19ddfeb4d1617551bab and fixed in 649c15c7691e9b13cbe9bf6c65c365350e056067.
problem types: CWE-415
affected:
{
packageName: linux
product: linux
vendor: The Linux Kernel Organization
repo: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
platforms: Linux
versions:
lessThan: 6.3~rc2, status: affected, version: 0, versionType: semver
}
metrics:
format: CVSS
cvssV3_1: [
version: 3.1
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: HIGH
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H
baseScore: 4.7
baseSeverity: MEDIUM
]