CVE-2022-29968

Description

An issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c lacks initialization of kiocb->private.

CVSS breakdown

Affected products

• fedoraproject / fedora36 – 36
• fedoraproject / fedora34 – 34
• fedoraproject / fedora35 – 35
• Linux / Linux kernel5.16 – 5.17.6
• NetApp / h300s_firmware
• NetApp / h410c_firmware
• NetApp / h410s_firmware
• NetApp / h500s_firmware
• NetApp / h700s_firmware
• NetApp / solidfire_&_hci_management_node

References

• PATCHhttps://github.com/torvalds/linux/commit/32452a3eb8b64e01e2be717f518c0be046975b9d
• MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XA7UZ3HS73KXVYCIKN5ZDH7LLLGPUMOZ/
• MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TLWTG3TWIMLNQEVTA3ZQYVLLU2AJM3DY/
• MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU7MT7BPTA2NG24BTLZF5ZWYTLSO7BU3/
• MISChttps://security.netapp.com/advisory/ntap-20220715-0009/