CVE-2022-1786: Use After Free
A use-after-free flaw was found in the Linux kernel’s iouring subsystem in the way a user sets up a ring with IORINGSETUPIOPOLL with more than one task completing submissions on this ring. This flaw allows a local user to crash or escalate their privileges on the system.
Other sources
The root cause of the bug is a misuse of the identity model in iouring. When preparing a request, the kernel uses the identity of the current task instead of that of the request task, which causes type confusion and invalid-free when the request is being destroyed.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-1786.
What is the severity of CVE-2022-1786?
CVE-2022-1786 has a severity value of 7, which is considered high.
Which software is affected by CVE-2022-1786?
CVE-2022-1786 affects the Linux kernel (versions between 5.10 and 5.12) and Netapp H410c Firmware.
How does CVE-2022-1786 affect the system?
CVE-2022-1786 allows a local user to crash or escalate their privileges on the system.
Are there any fixes available for CVE-2022-1786?
Yes, fixes are available. Please refer to the references for more information on how to apply the fixes.