CVE-2022-1786

CVSS v3.1 7.8 (High)

CVSS v2.0 7.2 (High)

EPSS 0.04 % (5^th)

Affected Products 11

Advisories 6

A use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets up a ring with IORING_SETUP_IOPOLL with more than one task completing submissions on this ring. This flaw allows a local user to crash or escalate their privileges on the system.

Weaknesses

CWE-416: Use After Free
CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')

CVE Status: PUBLISHED
CNA: Red Hat, Inc.
Published Date: 2022-06-02 14:15:33
(2 years ago)
Updated Date: 2023-03-01 20:16:24
(18 months ago)

Affected Products

Linux

Linux Kernel

Netapp

Configuration #1

AND

		CPE23	From	Up To
OR
	Linux Kernel from 5.10 version and prior 5.12 version	cpe:2.3:o:linux:linux_kernel	>= 5.10	< 5.12

Configuration #2

AND

		CPE23
OR
	Netapp H410c Firmware	cpe:2.3:o:netapp:h410c_firmware:-
OR
	Running on/with
	Netapp H410c	cpe:2.3:h:netapp:h410c:-

Configuration #3

AND

		CPE23
OR
	Netapp H300s Firmware	cpe:2.3:o:netapp:h300s_firmware:-
OR
	Running on/with
	Netapp H300s	cpe:2.3:h:netapp:h300s:-

Configuration #4

AND

		CPE23
OR
	Netapp H500s Firmware	cpe:2.3:o:netapp:h500s_firmware:-
OR
	Running on/with
	Netapp H500s	cpe:2.3:h:netapp:h500s:-

Configuration #5

AND

		CPE23
OR
	Netapp H700s Firmware	cpe:2.3:o:netapp:h700s_firmware:-
OR
	Running on/with
	Netapp H700s	cpe:2.3:h:netapp:h700s:-

Configuration #6

AND

		CPE23
OR
	Netapp H410s Firmware	cpe:2.3:o:netapp:h410s_firmware:-
OR
	Running on/with
	Netapp H410s	cpe:2.3:h:netapp:h410s:-