CVE-2024-0582

A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and then frees it. This flaw allows a local user to crash or potentially escalate their privileges on the system.

• CWE-416
• CWE-416

• https://access.redhat.com/security/cve/CVE-2024-0582Third Party Advisory
• https://bugs.chromium.org/p/project-zero/issues/detail?id=2504Issue Tracking, Mailing List
• https://bugzilla.redhat.com/show_bug.cgi?id=2254050Issue Tracking, Patch, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c392cbecd8eca4c53f2bf508731257d9d0a21c2dMailing List, Patch
• http://www.openwall.com/lists/oss-security/2024/04/24/3
• https://access.redhat.com/security/cve/CVE-2024-0582Third Party Advisory
• https://bugs.chromium.org/p/project-zero/issues/detail?id=2504Issue Tracking, Mailing List
• https://bugzilla.redhat.com/show_bug.cgi?id=2254050Issue Tracking, Patch, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c392cbecd8eca4c53f2bf508731257d9d0a21c2dMailing List, Patch

Published

Jan 16, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-0576A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B…9.8
• CVE-2024-0577A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B…9.8
• CVE-2024-0578A vulnerability classified as critical has been found in Tot…9.8
• CVE-2024-0579A vulnerability classified as critical was found in Totolink…9.8
• CVE-2024-0580Omission of user-controlled key authorization in the IDMSist…7.5
• CVE-2024-0581An Uncontrolled Resource Consumption vulnerability has been …5.5
• CVE-2024-0584Rejected reason: Do not use this CVE as it is duplicate of C…
• CVE-2024-0585The Essential Addons for Elementor – Best Elementor Template…5.4
• CVE-2024-0586The Essential Addons for Elementor – Best Elementor Template…6.4
• CVE-2024-0587The AMP for WP – Accelerated Mobile Pages plugin for WordPre…6.1
• CVE-2024-0588The Paid Memberships Pro – Content Restriction, User Registr…4.3
• CVE-2024-0589Cross-site scripting (XSS) vulnerability in the entry overvi…5.4