In the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in io_uring timeouts. This can be triggered by a local user who has no access to any user namespace; however, the race condition perhaps can only be exploited infrequently.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-livepatch-5.15.43-20.123Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-livepatch-5.10.112-108.499Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.43-20.103Upgrade python-perf-debuginfoUpgrade python-perf | Jul 4, 2022 | Apr 22, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-headersUpgrade perf-debuginfo | Feb 17, 2025 | Apr 8, 2022 |
| Debian | — | Upgrade linux | Nov 4, 2022 | Apr 22, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Aug 2, 2022 | Apr 22, 2022 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 22, 2024 | Apr 8, 2022 |
| Suse | — | Upgrade dtb-rockchipUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-default-baseUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade reiserfs-kmp-azureUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade dtb-socionextUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade dtb-apmUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade dtb-freescaleUpgrade kernel-debugUpgrade dtb-mediatekUpgrade dtb-renesasUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade kernel-64kbUpgrade kernel-macrosUpgrade kernel-develUpgrade dtb-apple | Oct 26, 2022 | Apr 22, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 22, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub