Description
The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file net/socket.c. This issue was introduced in da214a475f8bd1d3e9e7a19ddfeb4d1617551bab and fixed in 649c15c7691e9b13cbe9bf6c65c365350e056067.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| The Linux Kernel Organization | linux | < 6.3~rc2 | 6.3~rc2 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.1.20-1 | — |
| Debian 13 | linux | 6.1.20-1 | — |
| Debian 12 | linux | 6.1.20-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | linux-allwinner-5.19 | 5.19.0-1010.10~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-aws-5.19 +1 | 5.19.0-1023.24~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-gcp-5.19 | 5.19.0-1021.23~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-hwe-5.19 | 5.19.0-40.41~22.04.1 | USN-6024-1 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-5.19 | 5.19.0-1022.23~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-oem-6.0 | 6.0.0-1013.13 | USN-5977-1 |
| Ubuntu 22.04 LTS | linux-oem-6.1 | 6.1.0-1009.9 | USN-6033-1 |
| Ubuntu 22.04 LTS | linux-riscv | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv-5.19 | 5.19.0-1016.17~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-starfive-5.19 | 5.19.0-1015.17~22.04.1 | — |
| Ubuntu 20.04 LTS | linux-riscv +22 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.1.19-30.43 | 1.0-0.amzn2023 | ALAS2023-2023-138 |
| Amazon Linux 2023 | perf +12 | 6.1.19-30.43.amzn2023 | ALAS2023-2023-138 |
Advisories 5
- USN-5977-1 linux-oem-6.0 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6033-1 linux-oem-6.1 vulnerabilities Ubuntu Security Notices (USN) · Oct 22, 2026
- USN-6024-1 linux, linux-aws, linux-azure, linux-gcp, linux-hwe-5.19, linux-kvm, linux-lowlatency, linux-oracle, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Oct 22, 2026
- ALAS2023-2023-138 Important: kernel security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Feb 8, 2026
- WID-SEC-2023-0634 Linux Kernel: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Apr 26, 2023
References
- https://www.openwall.com/lists/oss-security/2023/03/13/2 issue-tracking
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1032 issue-tracking
- https://ubuntu.com/security/notices/USN-6033-1 third-party-advisory
- https://ubuntu.com/security/notices/USN-6024-1 third-party-advisory
- https://ubuntu.com/security/notices/USN-5977-1 third-party-advisory