high7.5
CVE-2022-2327
io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing…
Impact
io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect reference counts which can then lead to a double free. We recommend upgrading the kernel past commit df3f3bb5059d20ef094d6b2f0256c4bf4127a859
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netapp | H300s Firmware | All versions |
| Netapp | H500s Firmware | All versions |
| Netapp | H700s Firmware | All versions |
| Netapp | H410s Firmware | All versions |
| Netapp | H410c Firmware | All versions |
| Linux | Linux Kernel | before 5.10.125 from 5.11 before 5.12 |
Weakness classification
References
- NVD record
- CVE.org record
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-5.10.y&id=df3f3bb5059d20ef094d6b2f0256c4bf4127a859
- https://kernel.dance/#df3f3bb5059d20ef094d6b2f0256c4bf4127a859
- https://security.netapp.com/advisory/ntap-20230203-0009/
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html