7.5
Élevée
CVE-2022-2327 io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is…
Description
io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect reference counts which can then lead to a double free. We recommend upgrading the kernel past commit df3f3bb5059d20ef094d6b2f0256c4bf4127a859
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux Kernel | Versions non publiées | |
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 | premières → < 1.1 | 1.1 |
Références
- git.kernel.org git.kernel.org
- kernel.dance kernel.dance
- security.netapp.com security.netapp.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Linux Kernel
Les 11 CVE de Linux Kernel →
CVE-2022-2503
Dm-verity is used for extending root-of-trust to root filesystems
6.9
Moyenne
CVE-2021-22543
An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks…
8.7
Élevée
CVE-2021-23134
Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their…
7.8
Élevée
CVE-2021-23133
A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege…
6.7
Moyenne