CVE-2022-50705 — Incorrect Synchronization in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 93.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
io_uring/rw: defer fsnotify calls to task context
We can't call these off the kiocb completion as that might be off
soft/hard irq context. Defer the calls to when we process the
task_work for this request. That avoids valid complaints like:
stack backtrace:
CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.0.0-rc6-syzkaller-00321-g105a36f3694e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2…
Affected Packages4 packages
▶CVEListV5linux/linuxdf1ec53252d5b5b26ea49e30438741c9a6d89857 — 89a410dbd0f159ddd308f19d6eb682fc753e4771+5
🔴Vulnerability Details
3GHSA▶
GHSA-r9f5-5g6p-cv83: In the Linux kernel, the following vulnerability has been resolved:
io_uring/rw: defer fsnotify calls to task context
We can't call these off the ki↗2025-12-24
OSV▶
CVE-2022-50705: In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: defer fsnotify calls to task context We can't call these off the kioc↗2025-12-24