tocsin

Debian/linux: high 7.8

In the Linux kernel before 5.4.2, the io_uring feature leads to requests that inadvertently have UID 0 and full capabilities, aka CID-181e448d8709. This is related to fs/io-wq.c, fs/io_uring.c, and ne

Action: Upgrade linux to 5.3.15-1 or later.

Affected

introducedfixedlast affected
05.3.15-1-

Fixed versions

5.3.15-1

Sources

published · modified · JSON