Use After Free vulnerability in Linux Kernel allows Privilege Escalation. An improper Update of Reference Count in io_uring leads to Use-After-Free and Local Privilege Escalation. When io_msg_ring was invoked with a fixed file, it called io_fput_file() which improperly decreased its reference count (leading to Use-After-Free and Local Privilege Escalation). Fixed files are permanently registered to the ring, and should not be put separately.
We recommend upgrading past commit https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679 https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 22, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 22, 2022 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-5.19.0-1015-kvmUpgrade linux-image-5.19.0-1016-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-5.19.0-28-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-5.19.0-1011-raspi-nolpaeUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-azureUpgrade linux-image-5.19.0-1011-raspiUpgrade linux-image-5.19.0-1014-ibmUpgrade linux-image-5.19.0-1014-lowlatency-64kUpgrade linux-image-5.19.0-1014-oracleUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-5.19.0-1016-azureUpgrade linux-image-5.19.0-1014-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.19.0-28-genericUpgrade linux-image-5.19.0-1014-gcpUpgrade linux-image-5.19.0-28-generic-64kUpgrade linux-image-ibm | Jan 7, 2023 | Nov 22, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub