CVE-2022-2602CWE-416

CVE-2022-2602

Medium · published January 8, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
72.9
In the wild
Unconfirmed
What it is

io_uring UAF, Unix SCM garbage collection

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.01433 · 72.9th percentile
Weakness
CWE-416 · Use After Free
Published
2024-01-08T23:15Z
Affected products (5)
ProductVersionsFixed in
linux/linux_kernel≤ 6.0.19—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
References (15)
https://ubuntu.com/security/notices/USN-5691-1 · af854a3a-2127-422b-91ae-364da2661108https://ubuntu.com/security/notices/USN-5692-1 · af854a3a-2127-422b-91ae-364da2661108https://ubuntu.com/security/notices/USN-5693-1 · af854a3a-2127-422b-91ae-364da2661108https://ubuntu.com/security/notices/USN-5700-1 · af854a3a-2127-422b-91ae-364da2661108https://ubuntu.com/security/notices/USN-5752-1 · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-794697.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttp://packetstormsecurity.com/files/176533/Linux-Broken-Unix-GC-Interaction-Use-After-Free.html · [email protected]https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2602 · [email protected]https://ubuntu.com/security/notices/USN-5691-1 · [email protected]https://ubuntu.com/security/notices/USN-5692-1 · [email protected]https://ubuntu.com/security/notices/USN-5693-1 · [email protected]https://ubuntu.com/security/notices/USN-5700-1 · [email protected]https://ubuntu.com/security/notices/USN-5752-1 · [email protected]http://packetstormsecurity.com/files/176533/Linux-Broken-Unix-GC-Interaction-Use-After-Free.html · af854a3a-2127-422b-91ae-364da2661108https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2602 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 08 JAN 17:56Z
    io_uring UAF, Unix SCM garbage collection
    cvelistv5