CVE-2022-47946

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.10.x through 5.10.154

Description The issue is related to a use-after-free in the io sqpoll wait sq function in fs/io uring.c, which allows an attacker to crash the kernel, resulting in denial of service. The finish wait function can be skipped. An attack can occur in some situations by forking a process and then quickly terminating it.

Recommendations For Linux kernel versions 5.10.x through 5.10.154, update to a version after 5.10.155 to resolve the issue. As a temporary workaround, consider restricting the use of the io sqpoll wait sq function in fs/io uring.c to minimize the risk of exploitation. Avoid forking and quickly terminating processes to reduce the likelihood of an attack.