CVE-2022-29968

An issue was discovered in the Linux kernel through 5.17.5. iorwinitfile in fs/iouring.c lacks initialization of kiocb-private...

PT-2022-29248

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.17.3 through v5.17.4 Description The issue concerns the io uring functionality, specifically the abort file assignment prior to assigning credentials. The actual impact and attack plausibility have not yet been proven...

PT-2022-29375

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.17 through v5.17.1 Description The issue is related to io uring, where poll refs are bumped to full 31-bits. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29267

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to the io uring feature in the Linux Kernel. It involves dropping the old style inflight file tracking. The actual impact and attack plausibility have not yet been proven...

AZL-9582 CVE-2022-29582 affecting package kernel for versions less than 5.15.37.1-2

In the Linux kernel before 5.17.3, fs/iouring.c has a use-after-free due to a race condition in iouring timeouts. This can be triggered by a local user who has no access to any user namespace; however, the race condition perhaps can only be exploited infrequently...

PT-2022-29136

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.103 Description The issue is related to the io uring functionality in the Linux Kernel. It involves adding a schedule point in the io add buffers function. The actual impact and potential for attack have no...

PT-2022-29019

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.7 through v5.16.11 Description A potential security issue has been identified in the io uring component of the Linux Kernel. The issue is related to the io add buffers function. The actual impact and attack plausibilit...

PT-2022-29085

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.26 Description The issue is related to the io uring functionality in the Linux Kernel. It involves adding a schedule point in the io add buffers function. The actual impact and attack plausibility have not...

A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1. The kernel can panic when an improper cancellation operation triggers the submission of new io-uring operations during a shortage of free space. This flaw allows a local user with permissions to execute io-uring requests to possibly crash the system.

...

Linux kernel io-workqueue denial of service vulnerability

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel versions prior to 5.15-rc1 have a denial-of-service vulnerability that stems from a false cancel operation that triggers the commit of a new io-uring, resulting in a kernel error. An attacke...

CVE-2021-4023

A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1. The kernel can panic when an improper cancellation operation triggers the submission of new io-uring operations during a shortage of free space. This flaw allows a local user with permissions to...

CVE-2021-4023

A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1. The kernel can panic when an improper cancellation operation triggers the submission of new io-uring operations during a shortage of free space. This flaw allows a local user with permissions to...

DEBIAN-CVE-2021-4023

A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1. The kernel can panic when an improper cancellation operation triggers the submission of new io-uring operations during a shortage of free space. This flaw allows a local user with permissions to...

UBUNTU-CVE-2021-4023

A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1. The kernel can panic when an improper cancellation operation triggers the submission of new io-uring operations during a shortage of free space. This flaw allows a local user with permissions to...

Design/Logic Flaw

A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1. The kernel can panic when an improper cancellation operation triggers the submission of new io-uring operations during a shortage of free space. This flaw allows a local user with permissions to...

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel versions prior to 5.15-rc1 have a denial-of-service vulnerability that stems from a false cancel operation that triggers the commit of a new io-uring, resulting in a kernel error. An attacke...

CVE-2021-4023

A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1. The kernel can panic when an improper cancellation operation triggers the submission of new io-uring operations during a shortage of free space. This flaw allows a local user with permissions to...

CVE-2021-4023

A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1. The kernel can panic when an improper cancellation operation triggers the submission of new io-uring operations during a shortage of free space. This flaw allows a local user with permissions to...

CVE-2021-4023

CVE-2021-4023 affects the Linux kernel io-workqueue, with pre-5.15-rc1 kernels able to panic if an improper cancellation triggers new io-uring submissions during memory shortage. The flaw enables a local user with io-uring permissions to crash the system. Connected sources indicate patches/versio...

CVE-2021-4023: Exposure of Sensitive Information to an Unauthorized Actor

A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1. The kernel can panic when an improper cancellation operation triggers the submission of new io-uring operations during a shortage of free space. This flaw allows a local user with permissions to...