CVE-2022-2327

🗓️ 22 Jul 2022 00:00:00Reported by GoogleType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 78 Views

io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect reference counts which can then lead to a double free. We recommend upgrading the kernel past commit df3f3bb5059d20ef094d6b2f0256c4bf4127a85

Reporter	Title	Published	Views	Family All 30
AstraLinux	Astra Linux - уязвимость в linux-5.10	3 May 202623:59	–	astralinux
Chainguard	CVE-2022-2327 vulnerabilities	9 Jan 202619:17	–	cgr
Circl	CVE-2022-2327	22 Jul 202214:19	–	circl
CNNVD	Linux kernel 资源管理错误漏洞	22 Jul 202200:00	–	cnnvd
CNVD	Linux kernel resource management error vulnerability (CNVD-2022-54906)	26 Jul 202200:00	–	cnvd
Cvelist	CVE-2022-2327 Use-after-free in io_uring ad work_flags in Linux Kernel	22 Jul 202200:00	–	cvelist
Debian CVE	CVE-2022-2327	22 Jul 202200:00	–	debiancve
Tenable Nessus	EulerOS 2.0 SP10 : kernel (EulerOS-SA-2022-2654)	2 Nov 202200:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.10.1 : kernel (EulerOS-SA-2022-2932)	28 Dec 202200:00	–	nessus
Tenable Nessus	Photon OS 4.0: Linux PHSA-2021-4.0-0065	22 Jul 202100:00	–	nessus

NVD

Node

linux linux_kernelMatch-

[
  {
    "vendor": "Linux Kernel",
    "product": "Linux Kernel",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "df3f3bb5059d20ef094d6b2f0256c4bf4127a859",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
kernel	www.kernel.dance/
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/
security	www.security.netapp.com/advisory/ntap-20230203-0009/

21 Nov 2024 07:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.5 - 7.8

EPSS0.00026

SSVC