Use After Free vulnerability in Linux Kernel allows Privilege Escalation. An improper Update of Reference Count in io_uring leads to Use-After-Free and Local Privilege Escalation. When io_msg_ring was invoked with a fixed file, it called io_fput_file() which improperly decreased its reference count (leading to Use-After-Free and Local Privilege Escalation). Fixed files are permanently registered to the ring, and should not be put separately.
We recommend upgrading past commit https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679 https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 22, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 22, 2022 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.19.0-1014-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-5.19.0-1014-lowlatencyUpgrade linux-image-5.19.0-1016-azureUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.19.0-28-generic-64kUpgrade linux-image-5.19.0-1014-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-5.19.0-1011-raspiUpgrade linux-image-5.19.0-1014-gcpUpgrade linux-image-5.19.0-28-genericUpgrade linux-image-5.19.0-1014-oracleUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-1015-kvmUpgrade linux-image-gcpUpgrade linux-image-5.19.0-28-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-5.19.0-1016-awsUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.19.0-1011-raspi-nolpae | Jan 7, 2023 | Nov 22, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub