CVE-2022-2327CWE-415CWE-416

CVE-2022-2327

High · published July 22, 2022

CVSS v3.1
7.5
EPSS
0%
Percentile
22.2
In the wild
Unconfirmed
What it is

io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect reference counts which can then lead to a double free. We recommend upgrading the kernel past commit df3f3bb5059d20ef094d6b2f0256c4bf4127a859

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00306 · 22.2th percentile
Weaknesses
CWE-415 · Double Free; CWE-416 · Use After Free
Published
2022-07-22T14:15Z
Affected products (7)
ProductVersionsFixed in
netapp/h300s_firmwareall versions—
netapp/h500s_firmwareall versions—
netapp/h700s_firmwareall versions—
netapp/h410s_firmwareall versions—
netapp/h410c_firmwareall versions—
linux/linux_kernel< 5.10.1255.10.125
linux/linux_kernel≥ 5.11, < 5.125.12
References (7)
EPSS history
Timeline
  • 22 JUL 00:00Z
    Use-after-free in io_uring ad work_flags in Linux Kernel
    cvelistv5