CVE-2022-29582 — Race Condition in Kernel

CWE-362 — Race ConditionCWE-416 — Use After FreeCWE-366 — Race Condition within a Thread11 documents8 sources
Severity
7.0HIGHNVD
EPSS
0.2%
top 60.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Linux KernelDebian LinuxDebian Linux+7 more
Timeline
PublishedApr 22
Latest updateOct 15

Description

In the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in io_uring timeouts. This can be triggered by a local user who has no access to any user namespace; however, the race condition perhaps can only be exploited infrequently.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.0 | Impact: 5.9

Affected Packages10 packages

▶NVDlinux/linux_kernel< 5.17.3
▶Debianlinux/linux_kernel< 5.10.113-1+3
▶debiandebian/linux< linux 5.17.3-1 (bookworm)

Also affects: Debian Linux 11.0

Patches

Patch: git.kernel.org ↗Patch: github.com ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

3
OSV
CVE-2022-29582: In fs, there is a possible use-after-free due to a race condition in io_uring timeouts↗2022-09-01
▶
GHSA
GHSA-52p4-cqpv-xm5j: In the Linux kernel before 5↗2022-04-23
▶
OSV
CVE-2022-29582: In the Linux kernel before 5↗2022-04-22
▶

📋Vendor Advisories

7
Oracle
Oracle Oracle Communications Risk Matrix: Platform (JetBrains Kotlin) — CVE-2020-29582↗2022-10-15
▶
Android
CVE-2022-29582: fs↗2022-09-01
▶
Oracle
Oracle Oracle Communications Risk Matrix: Policy (Kotlin) — CVE-2020-29582↗2022-04-15
▶
Microsoft
In the Linux kernel before 5.17.3 fs/io_uring.c has a use-after-free due to a race condition in io_uring timeouts. This can be triggered by a local user who has no access to any user namespace; howeve↗2022-04-12
▶
Red Hat
kernel: Race condition that allows container escape to system root↗2022-04-08
▶