CVE-2022-2602Use After Free in Linux

CWE-416Use After Free16 documents7 sources
Severity
7.0HIGHOSV
OSV6.6OSV5.5
No vector
EPSS
1.3%
top 20.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 19
Latest updateJan 9

Description

linux-oem-5.17 vulnerabilities David Bouman and Billy Jheng Bing Jhong discovered that a race condition existed in the io_uring subsystem in the Linux kernel, leading to a use- after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-2602) Duoming Zhou discovered that race conditions existed in the timer handling implementation of the Linux kernel's Rose X.25 protocol layer, resulting in use-after-free v

Affected Packages7 packages

🔴Vulnerability Details

5
OSV
linux-azure-fde vulnerabilities2022-11-30
OSV
Kernel Live Patch Security Notice2022-11-16
OSV
linux-oem-5.17 vulnerabilities2022-10-19
OSV
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gke, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linu2022-10-19
OSV
linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-kvm, linux-lowlatency, linux-lowlat2022-10-19

📋Vendor Advisories

10
Microsoft
io_uring UAF Unix SCM garbage collection2024-01-09
CISA ICS
Siemens SIMATIC S7-1500 TM MFP Linux Kernel2023-06-15
Ubuntu
Linux kernel (Azure CVM) vulnerabilities2022-11-30
Ubuntu
Kernel Live Patch Security Notice2022-11-16
Ubuntu
Linux kernel vulnerabilities2022-10-26