Dashboard / CVE-2024-0582

CVE-2024-0582

HIGH 8 PoCs
MEDIUM Priority: 1.00 BB Relevance: 53/100
Published: 2024-01-16 Modified: 2026-11-04 First seen: 2026-11-04 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and then frees it. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Weakness Classification (1)

Affected Software (4)

VendorProductVersion
linux linux_kernel 6.4 – 6.6.5
linux linux_kernel 6.7
linux linux_kernel 6.7
linux linux_kernel 6.7

References & Advisories (5)

https://bugzilla.redhat.com/show_bug.cgi?id=2254050
Issue Tracking Patch Third Party Advisory

Proof of Concept (8)

★ 101
https://github.com/ysanatomic/io_uring_LPE-CVE-2024-0582
nomi-sec
★ 13
https://github.com/geniuszly/CVE-2024-0582
nomi-sec
★ 13
https://github.com/kuzeyardabulut/CVE-2024-0582
nomi-sec
★ 5
https://github.com/101010zyl/CVE-2024-0582-dataonly
nomi-sec
—
https://github.com/Forsaken0129/CVE-2024-0582
nomi-sec
—
https://github.com/0ptyx/cve-2024-0582
nomi-sec
—
https://github.com/pwnmonk/io_uring-n-day
nomi-sec
—
https://github.com/nanabingies/CVE-2024-0582
nomi-sec

Bug Bounty Relevance

53 / 100
✓ Low complexity
✓ No user interaction
✓ PoC available (8)

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

12.84%
Raw Score 0.128360
Percentile 96.3%
Date 2026-11-06

EPSS Trend

2026-11-06
0.12836
2026-11-05
0.12836
2026-11-04
0.12836

Intelligence Sources

mitre ref →
nvd ref →

External Links