CVE-2022-29968
🟡 Monitoruj
Brak inicjalizacji w io_rw_init_file w jądrze Linux umożliwia potencjalne wykorzystanie pamięci.
CVSS
7.8
EPSS
1.1%
Exploit
none
Vendor
netapp
Opis źródłowy (NVD)
An issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c lacks initialization of kiocb->private.
brak
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 7.8 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 1.1% |
| Opublikowano (NVD) | 2022-05-02 04:15:10 UTC |
| Ostatnia modyfikacja (NVD) | 2026-10-02 14:01:23 UTC |
Referencje
- https://github.com/torvalds/linux/commit/32452a3eb8b64e01e2be717f518c0be046975b9d ([email protected]) [Patch, Third Party Advisory]
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU7MT7BPTA2NG24BTLZF5ZWYTLSO7BU3/ ([email protected]) [Mailing List, Third Party Advisory]
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TLWTG3TWIMLNQEVTA3ZQYVLLU2AJM3DY/ ([email protected]) [Mailing List, Third Party Advisory]
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XA7UZ3HS73KXVYCIKN5ZDH7LLLGPUMOZ/ ([email protected]) [Mailing List, Third Party Advisory]
- https://security.netapp.com/advisory/ntap-20220715-0009/ ([email protected]) [Third Party Advisory]