7.5
High
CVE-2022-2327 io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is…
Description
io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect reference counts which can then lead to a double free. We recommend upgrading the kernel past commit df3f3bb5059d20ef094d6b2f0256c4bf4127a859
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Kernel | Versions not published | |
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 | earliest → < 1.1 | 1.1 |
References
- git.kernel.org git.kernel.org
- kernel.dance kernel.dance
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of Linux Kernel
The 11 CVEs of Linux Kernel →
CVE-2022-2503
Dm-verity is used for extending root-of-trust to root filesystems
6.9
Medium
CVE-2021-22543
An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks…
8.7
High
CVE-2021-23134
Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their…
7.8
High
CVE-2021-23133
A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege…
6.7
Medium