CVE-2022-1976CWE-416

A flaw was found in the Linux kernel’s implementation of IO-URING

published August 31, 2022

CVSS
—
EPSS
0%
Percentile
13.6
In the wild
Unconfirmed
What it is

A flaw was found in the Linux kernel’s implementation of IO-URING. This flaw allows an attacker with local executable permission to create a string of requests that can cause a use-after-free flaw within the kernel. This issue leads to memory corruption and possible privilege escalation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00235 · 13.6th percentile
Weakness
CWE-416 · Use After Free
Published
2022-08-31T00:00Z
EPSS history
Timeline
  • 31 AUG 00:00Z
    A flaw was found in the Linux kernel’s implementation of IO-URING
    cvelistv5