CVE-2022-1043

Summary

CVE	CVE-2022-1043
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2022-08-29 15:15:00 UTC
Updated	2023-02-02 17:13:00 UTC
Description	A flaw was found in the Linux kernel’s io_uring implementation. This flaw allows an attacker with a local account to corrupt system memory, crash the system or escalate privileges.

Risk And Classification

Problem Types: CWE-416

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Linux	Linux Kernel	All	All	All	All
Operating System	Linux	Linux Kernel	5.14	rc1	All	All
Operating System	Linux	Linux Kernel	5.14	rc2	All	All
Operating System	Linux	Linux Kernel	5.14	rc3	All	All
Operating System	Linux	Linux Kernel	5.14	rc4	All	All
Operating System	Linux	Linux Kernel	5.14	rc5	All	All
Operating System	Linux	Linux Kernel	5.14	rc6	All	All

References

Reference	Source	Link	Tags
io_uring: fix xa_alloc_cycle() error return value check · torvalds/linux@a30f895 · GitHub	MISC	github.com
Red Hat Customer Portal - Access to 24x7 support and knowledge	MISC	access.redhat.com
io_uring Same Type Object Reuse Privilege Escalation ≈ Packet Storm	MISC	packetstormsecurity.com
1997328 – (CVE-2022-1043) CVE-2022-1043 kernel: Linux Kernel io_uring Use-After-Free Privilege Escalation Vulnerability	MISC	bugzilla.redhat.com
ZDI-22-362 \| Zero Day Initiative	MISC	www.zerodayinitiative.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

179156 Debian Security Update for linux (CVE-2022-1043)
903746 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (10796)
904101 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (10796-1)
905809 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (10796-2)