CVE-2022-3910: Use after free in IO_uring in the Linux Kernel
Last updated 24 July 2024
Other sources
Use After Free vulnerability in Linux Kernel allows Privilege Escalation. An improper Update of Reference Count in iouring leads to Use-After-Free and Local Privilege Escalation. When iomsgring was invoked with a fixed file, it called iofputfile() which improperly decreased its reference count (leading to Use-After-Free and Local Privilege Escalation). Fixed files are permanently registered to the ring, and should not be put separately.
We recommend upgrading past commit https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679 https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Compensating control
Ensure that fixed files are permanently registered to the io_uring ring and are not put separately (i.e., avoid invoking io_msg_ring with a separately managed fixed file that would lead to an improper reference-count decrease via io_fput_file()).
Event History
Frequently Asked Questions
What is the severity of CVE-2022-3910?
CVE-2022-3910 is classified as a high-severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2022-3910?
To fix CVE-2022-3910, update the Linux Kernel to a patched version, such as 5.10.223-1, 6.1.123-1, or any version beyond the affected ranges.
Which Linux Kernel versions are affected by CVE-2022-3910?
CVE-2022-3910 affects Linux Kernel versions from 5.18 to 5.19.11 and specifically 6.0-rc1 to 6.0-rc5.
What does CVE-2022-3910 exploit?
CVE-2022-3910 exploits a Use-After-Free vulnerability in the io_uring component of the Linux Kernel, leading to local privilege escalation.
Is CVE-2022-3910 specific to a certain distribution?
CVE-2022-3910 is a vulnerability in the Linux Kernel and can affect any distribution that uses the vulnerable versions, such as Debian and its derivatives.