Lucene search
+L

2662 matches found

osv_debian
osv_debian
•added 2022/04/22 4:15 p.m.•11 views

DEBIAN-CVE-2022-29582

In the Linux kernel before 5.17.3, fs/iouring.c has a use-after-free due to a race condition in iouring timeouts. This can be triggered by a local user who has no access to any user namespace; however, the race condition perhaps can only be exploited infrequently...

7CVSS6.5AI score0.00773EPSS
SaveExploits3References1
osv_cve
osv_cve
•added 2022/04/22 4:15 p.m.•26 views

CVE-2022-29582

In the Linux kernel before 5.17.3, fs/iouring.c has a use-after-free due to a race condition in iouring timeouts. This can be triggered by a local user who has no access to any user namespace; however, the race condition perhaps can only be exploited infrequently...

7CVSS6.8AI score0.00773EPSS
SaveExploits3References10
Prion
Prion
•added 2022/04/22 4:15 p.m.•36 views

Race condition

In the Linux kernel before 5.17.3, fs/iouring.c has a use-after-free due to a race condition in iouring timeouts. This can be triggered by a local user who has no access to any user namespace; however, the race condition perhaps can only be exploited infrequently...

6.9CVSS6.2AI score0.00773EPSS
SaveExploits3References9Affected Software2
osv_ubuntu
osv_ubuntu
•added 2022/04/22 4:15 p.m.•12 views

UBUNTU-CVE-2022-29582

In the Linux kernel before 5.17.3, fs/iouring.c has a use-after-free due to a race condition in iouring timeouts. This can be triggered by a local user who has no access to any user namespace; however, the race condition perhaps can only be exploited infrequently...

7CVSS6.7AI score0.00773EPSS
SaveExploits3References9
UbuntuCve
UbuntuCve
•added 2022/04/22 4:15 p.m.•62 views

CVE-2022-29582

In the Linux kernel before 5.17.3, fs/iouring.c has a use-after-free due to a race condition in iouring timeouts. This can be triggered by a local user who has no access to any user namespace; however, the race condition perhaps can only be exploited infrequently...

7CVSS6.7AI score0.00773EPSS
SaveExploits3References8
CNNVD
CNNVD
•added 2022/04/22 12:00 a.m.•10 views

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel versions prior to 5.17.3 have a security vulnerability that stems from a contention condition in the iouring timeout, fs/iouring.c with use-after-free. No details of the vulnerability are...

7CVSS7.8AI score0.00773EPSS
SaveExploits3References15
CVE
CVE
•added 2022/04/22 12:00 a.m.•579 views

CVE-2022-29582

CVE-2022-29582 refers to a use-after-free in the Linux kernel io_uring timeout handling. The vulnerability resides in fs/io_uring.c and stems from a race condition in io_uring timeouts that can be triggered by a local user who does not have access to any user namespace. The initial description no...

7CVSS6.5AI score0.00773EPSS
SaveExploits3References10Affected Software1
Mend
Mend
•added 2022/04/22 12:00 a.m.•3 views

CVE-2022-29582

In the Linux kernel before 5.17.3, fs/iouring.c has a use-after-free due to a race condition in iouring timeouts. This can be triggered by a local user who has no access to any user namespace; however, the race condition perhaps can only be exploited infrequently...

7.3CVSS0.00773EPSS
SaveExploits3References11
Debian CVE
Debian CVE
•added 2022/04/22 12:00 a.m.•67 views

CVE-2022-29582

In the Linux kernel before 5.17.3, fs/iouring.c has a use-after-free due to a race condition in iouring timeouts. This can be triggered by a local user who has no access to any user namespace; however, the race condition perhaps can only be exploited infrequently...

7CVSS6.8AI score0.00773EPSS
SaveExploits3
GithubExploit
GithubExploit
•added 2022/04/19 7:38 p.m.•889 views

Exploit for Missing Initialization of Resource in Linux Linux_Kernel

CVE-2022-29968 Proof-of-concept exploit for CVE-2022-29968 un...

7.8CVSS7.4AI score0.01058EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2022/04/08 12:00 a.m.•19 views

PT-2022-1370

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.3 Description The issue is related to a use-after-free vulnerability in the fs/io uring.c file of the Linux kernel's io uring subsystem, caused by a race condition in io uring timeouts. This can be triggered...

7CVSS6.5AI score0.00773EPSS
SaveExploits3References371
Positive Technologies
Positive Technologies
•added 2022/04/07 12:00 a.m.•26 views

PT-2022-6542 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A use-after-free vulnerability in the Linux Kernel io uring system can be exploited to achieve local privilege escalation. The io file get fixed function lacks the presence of ctx-urin...

9.8CVSS6.8AI score0.6777EPSS
SaveExploits227References1026
Metasploit
Metasploit
•added 2022/03/22 12:00 a.m.•315 views

io_uring Same Type Object Reuse Priv Esc

This module exploits a bug in iouring leading to an additional putcred that can be exploited to hijack credentials of other processes. We spawn SUID programs to get the free'd cred object reallocated by a privileged process and abuse them to create a SUID root binary ourselves that'll pop a shell...

8.8CVSS7.9AI score0.03865EPSS
SaveExploits4
osv_gsd
osv_gsd
•added 2022/03/18 12:25 a.m.•22 views

GSD-2022-1000862 io_uring: add a schedule point in io_add_buffers()

iouring: add a schedule point in ioaddbuffers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

7.2AI score
SaveExploits0
osv_gsd
osv_gsd
•added 2022/03/18 12:21 a.m.•15 views

GSD-2022-1000819 io_uring: disallow modification of rsrc_data during quiesce

iouring: disallow modification of rsrcdata during quiesce This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.26 by commit...

7.2AI score
SaveExploits0
osv_gsd
osv_gsd
•added 2022/03/18 12:20 a.m.•28 views

GSD-2022-1000811 io_uring: add a schedule point in io_add_buffers()

iouring: add a schedule point in ioaddbuffers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.26 by commit...

7.2AI score
SaveExploits0
osv_gsd
osv_gsd
•added 2022/03/18 12:15 a.m.•16 views

GSD-2022-1000753 io_uring: disallow modification of rsrc_data during quiesce

iouring: disallow modification of rsrcdata during quiesce This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...

7.2AI score
SaveExploits0
osv_gsd
osv_gsd
•added 2022/03/18 12:14 a.m.•21 views

GSD-2022-1000745 io_uring: add a schedule point in io_add_buffers()

iouring: add a schedule point in ioaddbuffers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•2 views

PT-2022-29027

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.12 Description The issue is related to io uring, where modification of rsrc data during quiesce is disallowed. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•3 views

PT-2022-29093

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.26 Description The issue is related to the io uring feature, where modification of rsrc data during quiesce is disallowed. The actual impact and attack plausibility have not yet been proven. Recommendations...

5.8AI score
SaveExploits0References1
Rows per page
Query Builder