Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-20684
HistoryMar 14, 2022 - 12:00 a.m.

Linux kernel io-workqueue denial of service vulnerability

2022-03-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
21
linux kernel
denial of service
io-uring
vulnerability
system crash

EPSS

0

Percentile

5.1%

Linux kernel is the kernel used by the Linux Foundation’s open source operating system Linux. Linux kernel versions prior to 5.15-rc1 have a denial-of-service vulnerability that stems from a false cancel operation that triggers the commit of a new io-uring, resulting in a kernel error. An attacker exploited the vulnerability (a local user with permission to perform io-uring requests) to cause a system crash.