CVE-2022-49791
N/A
N/A
Summary
In the Linux kernel, the following vulnerability has been resolved:
io_uring: fix multishot accept request leaks
Having REQ_F_POLLED set doesn't guarantee that the request is executed as a multishot from the polling path. Fortunately for us, if the code thinks it's multishot issue when it's not, it can only ask to skip completion so leaking the request. Use issue_flags to mark multipoll issues.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 390ed29b5e425ba00da2b6113b74a14949f71b02 < 0e4626de856ef8f25ecd9c716e76d4f95ce95639 | affected |
| Linux | Linux | 390ed29b5e425ba00da2b6113b74a14949f71b02 < 91482864768a874c4290ef93b84a78f4f1dac51b | affected |
| Linux | Linux | 5.19 | affected |
| Linux | Linux | 0 < 5.19 | unaffected |
| Linux | Linux | 6.0.10 <= 6.0.* | unaffected |
| Linux | Linux | 6.1 <= * | unaffected |
Weaknesses
References
- https://git.kernel.org/stable/c/0e4626de856ef8f25ecd9c716e76d4f95ce95639
- https://git.kernel.org/stable/c/91482864768a874c4290ef93b84a78f4f1dac51b
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.