PT-2022-2424
CVE-2022-29968
·
Published
2022-04-28
·
Updated
2026-10-02
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 5.17.5
Description
An issue was discovered in the Linux kernel where the
io rw init file function in fs/io uring.c lacks initialization of kiocb->private. This issue is related to errors in initialization and may allow an attacker to gain unauthorized access to protected information.Recommendations
For Linux kernel versions through 5.17.5, update to a version newer than 5.17.5 to resolve the issue.
At the moment, there is no information about other specific fixes for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾