Use After Free vulnerability in Linux Kernel allows Privilege Escalation. An improper Update of Reference Count in io_uring leads to Use-After-Free and Local Privilege Escalation. When io_msg_ring was invoked with a fixed file, it called io_fput_file() which improperly decreased its reference count (leading to Use-After-Free and Local Privilege Escalation). Fixed files are permanently registered to the ring, and should not be put separately.
We recommend upgrading past commit https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679 https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 22, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 22, 2022 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-5.19.0-28-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.19.0-1016-awsUpgrade linux-image-5.19.0-1011-raspi-nolpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-5.19.0-1015-kvmUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-5.19.0-1014-ibmUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.19.0-1014-lowlatencyUpgrade linux-image-5.19.0-1011-raspiUpgrade linux-image-5.19.0-28-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.19.0-1014-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-5.19.0-1014-lowlatency-64kUpgrade linux-image-5.19.0-1016-azureUpgrade linux-image-oem-22.04Upgrade linux-image-5.19.0-1014-oracleUpgrade linux-image-5.19.0-28-generic | Jan 7, 2023 | Nov 22, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub