CVE-2022-29968: High severity Linux Linux kernel vulnerability
An issue was discovered in the Linux kernel through 5.17.5. iorwinitfile in fs/iouring.c lacks initialization of kiocb->private.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-29968?
CVE-2022-29968 is considered a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2022-29968?
To fix CVE-2022-29968, update your Linux kernel to version 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.11-1, or 6.12.12-1.
What versions of the Linux kernel are affected by CVE-2022-29968?
CVE-2022-29968 affects the Linux kernel versions through 5.17.5.
Which distributions are impacted by CVE-2022-29968?
CVE-2022-29968 impacts distributions including Fedora 34, 35, and 36, as well as several Debian versions.
What is the nature of the vulnerability in CVE-2022-29968?
CVE-2022-29968 is caused by a lack of initialization of kiocb->private in the io_rw_init_file function in the Linux kernel.