Description
io_uring UAF, Unix SCM garbage collection
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
High
Affected products
- Canonical / Ubuntu Linux18.04 – 18.04
- Canonical / Ubuntu Linux20.04 – 20.04
- Canonical / Ubuntu Linux22.04 – 22.04
- Canonical / Ubuntu Linux22.10 – 22.10
- Linux / Linux kernel6.0.19
- The Linux Kernel Organization / linux0 – 6.1~rc1
References
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5692-1
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5752-1
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5693-1
- CONFIRMhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2602
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5691-1
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5700-1
- EXPLOIThttp://packetstormsecurity.com/files/176533/Linux-Broken-Unix-GC-Interaction-Use-After-Free.html
Updated 17m ago · 8 sources