CVE-2022-2327

HighCVSS 7.8/10Last modified Oct 14, 2026

Description

io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect reference counts which can then lead to a double free. We recommend upgrading the kernel past commit df3f3bb5059d20ef094d6b2f0256c4bf4127a859

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416CWE-415

Affected software

No affected versions have been published.

Timeline

Published
Jul 22, 2022
Last modified
Oct 14, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-232708.1Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityCVE-2022-232716.5Microsoft Dynamics GP Elevation Of Privilege VulnerabilityCVE-2022-232728.1Microsoft Dynamics GP Elevation Of Privilege VulnerabilityCVE-2022-232737.1Microsoft Dynamics GP Elevation Of Privilege VulnerabilityCVE-2022-232748.8Microsoft Dynamics GP Remote Code Execution VulnerabilityCVE-2022-232767.8SQL Server for Linux Containers Elevation of Privilege VulnerabilityCVE-2022-232778.8Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2022-232785.9Microsoft Defender for Endpoint Spoofing VulnerabilityCVE-2022-232797.0Windows ALPC Elevation of Privilege VulnerabilityCVE-2022-23284.8The Flexi Quote Rotator WordPress plugin through 0.9.4 does not sanitise and escape its settings, allowing high privilege users such as admiCVE-2022-232805.3Microsoft Outlook for Mac Security Feature Bypass VulnerabilityCVE-2022-232815.5Windows Common Log File System Driver Information Disclosure Vulnerability
CVE-2022-2327: High severity, CVSS 7.8 | Vulnix