7.8
Élevée
CVE-2022-3910 Use After Free vulnerability in Linux Kernel allows Privilege Escalation
Description
Use After Free vulnerability in Linux Kernel allows Privilege Escalation. An improper Update of Reference Count in io_uring leads to Use-After-Free and Local Privilege Escalation. When io_msg_ring was invoked with a fixed file, it called io_fput_file() which improperly decreased its reference count (leading to Use-After-Free and Local Privilege Escalation). Fixed files are permanently registered to the ring, and should not be put separately. We recommend upgrading past commit https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679 https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux Kernel 5.18 | 5.18.0 → 5.19.10 | Pas de correctif indiqué |
Références
- github.com github.com
- kernel.dance kernel.dance
Chronologie
- Publiée
- Dernière modification
Autres CVE de Linux Kernel
Les 43 CVE de Linux Kernel →
CVE-2024-24864
A race condition was found in the Linux kernel's media/dvb-core in dvbdmx_write() function
5.3
Moyenne
CVE-2024-24857
A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function
4.6
Moyenne
CVE-2024-24858
A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function
4.6
Moyenne
CVE-2024-24859
A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function
4.6
Moyenne