CVE-2022-49791

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49791

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: io_uring: fix multishot accept request leaks Having REQ_F_POLLED set doesn't guarantee that the request is executed as a multishot from the polling path. Fortunately for us, if the code thinks it's multishot issue when it's not, it can only ask to skip completion so leaking the request. Use issue_flags to mark multipoll issues.

References
Link Resource
https://git.kernel.org/stable/c/0e4626de856ef8f25ecd9c716e76d4f95ce95639 Patch
https://git.kernel.org/stable/c/91482864768a874c4290ef93b84a78f4f1dac51b Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
History

05 Nov 2025, 15:19

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/0e4626de856ef8f25ecd9c716e76d4f95ce95639 - () https://git.kernel.org/stable/c/0e4626de856ef8f25ecd9c716e76d4f95ce95639 - Patch
References () https://git.kernel.org/stable/c/91482864768a874c4290ef93b84a78f4f1dac51b - () https://git.kernel.org/stable/c/91482864768a874c4290ef93b84a78f4f1dac51b - Patch
CWE CWE-401
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: io_uring: corrección de fugas de solicitudes de aceptación multishot. Tener REQ_F_POLLED configurado no garantiza que la solicitud se ejecute como multishot desde la ruta de sondeo. Afortunadamente, si el código considera que se trata de un problema multishot cuando no lo es, solo puede solicitar omitir la finalización, lo que provoca la fuga de la solicitud. Use issue_flags para marcar los problemas de multipoll.
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

01 May 2025, 15:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-01 15:16

Updated : 2025-11-05 15:19

NVD link : CVE-2022-49791

Mitre link : CVE-2022-49791

CVE.ORG link : CVE-2022-49791

JSON object : View

Products Affected

linux

CWE
CWE-401

Missing Release of Memory after Effective Lifetime