CVE-2022-29968

HighCVSS 7.8/10Last modified Oct 2, 2026

Description

An issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c lacks initialization of kiocb->private.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-909

Affected software

No affected versions have been published.

Timeline

Published
May 2, 2022
Last modified
Oct 2, 2026
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-299696.1The RSS extension before 2022-04-29 for MediaWiki allows XSS via an rss element (if the feed is in $wgRSSUrlWhitelist and $wgRSSAllowLinkTagCVE-2022-29978.0Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10.CVE-2022-299707.5Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.CVE-2022-299717.8An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena ODBC Driver 1.1.1 thrCVE-2022-299727.8An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift ODBC Driver (1.4.14CVE-2022-299734.7relan exFAT 1.3.0 allows local users to obtain sensitive information (data from deleted files in the filesystem) in certain situations involCVE-2022-299744.3AMI (aka American Megatrends) NTFS driver 1.0.0 (fixed in late 2021 or early 2022) has a buffer overflow. This driver is, for example, used CVE-2022-299755.4An Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before 22.0.0 .CVE-2022-299765.4An Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before 22.0.0 .CVE-2022-299776.5There is an assertion failure error in stbi__jpeg_huff_decode, stb_image.h:1894 in libsixel img2sixel 1.8.6. Remote attackers could leverageCVE-2022-299786.5There is a floating point exception error in sixel_encoder_do_resize, encoder.c:633 in libsixel img2sixel 1.8.6. Remote attackers could leveCVE-2022-299799.8Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_designation.
CVE-2022-29968: High severity, CVSS 7.8 | Vulnix