CVE-2023-54030

Summary

In the Linux kernel, the following vulnerability has been resolved:

io_uring/net: don't overflow multishot recv

Don't allow overflowing multishot recv CQEs, it might get out of hand, hurt performance, and in the worst case scenario OOM the task.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxb3fdea6ecb55c3ceea866ff66486927e51a982b3 < 1e2db9837be7d24a2a74eb3f3906d0872bee8907affected
LinuxLinuxb3fdea6ecb55c3ceea866ff66486927e51a982b3 < b2e74db55dd93d6db22a813c9a775b5dbf87c560affected
LinuxLinux6.0affected
LinuxLinux0 < 6.0unaffected
LinuxLinux6.5.3 <= 6.5.*unaffected
LinuxLinux6.6 <= *unaffected

Weaknesses

References