Use After Free vulnerability in Linux Kernel allows Privilege Escalation. An improper Update of Reference Count in io_uring leads to Use-After-Free and Local Privilege Escalation. When io_msg_ring was invoked with a fixed file, it called io_fput_file() which improperly decreased its reference count (leading to Use-After-Free and Local Privilege Escalation). Fixed files are permanently registered to the ring, and should not be put separately.
We recommend upgrading past commit https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679 https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 22, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 22, 2022 |
| Ubuntu | — | Upgrade linux-image-5.19.0-1016-awsUpgrade linux-image-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.19.0-1015-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-5.19.0-1011-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-5.19.0-28-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-5.19.0-1014-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.19.0-1014-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.19.0-1014-oracleUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-5.19.0-28-genericUpgrade linux-image-5.19.0-1016-azureUpgrade linux-image-ibmUpgrade linux-image-5.19.0-1011-raspiUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.19.0-1014-ibmUpgrade linux-image-5.19.0-1014-gcpUpgrade linux-image-5.19.0-28-generic-64kUpgrade linux-image-generic-lpae | Jan 7, 2023 | Nov 22, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub