PT-2022-2424

CVE-2022-29968

·

Published

2022-04-28

·

Updated

2026-10-02

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.17.5
Description An issue was discovered in the Linux kernel where the io rw init file function in fs/io uring.c lacks initialization of kiocb->private. This issue is related to errors in initialization and may allow an attacker to gain unauthorized access to protected information.
Recommendations For Linux kernel versions through 5.17.5, update to a version newer than 5.17.5 to resolve the issue. At the moment, there is no information about other specific fixes for this issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
ALSA-2024_2394
ALSA-2025_16880
ALT-PU-2022-1835
ALT-PU-2022-1873
ALT-PU-2022-2152
ALT-PU-2022-2155
ALT-PU-2023-1684
ALT-PU-2023-1741
ALT-PU-2023-1814
ALT-PU-2023-4894
AZL-9596
OPENSUSE-SU-2024:12053-1
OPENSUSE-SU-2024:13704-1
USN-5471-1
Found an issue in the description? Have something to add? Feel free to write us 👾