Use-after-free in Linux kernel - CVE-2022-47946

Vulnerability identifier: #VU70508

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-47946

CWE-ID: CWE-416

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error within the io_sqpoll_wait_sq() function in fs/io_uring.c. A remote attacker can crash the kernel by forking a process and then quickly terminating it.

Linux kernel
Anolis OS
openEuler
kernel-headers
kernel-source
bpftool-debuginfo
python3-perf
python3-perf-debuginfo
kernel-debuginfo
perf-debuginfo
bpftool
kernel-debugsource
kernel-tools
kernel-devel
perf
kernel-tools-debuginfo
kernel-tools-devel
kernel
kernel-tools-libs-devel
kernel-tools-libs
kernel-modules-extra
kernel-modules
kernel-debug-modules-extra
kernel-debug-modules
kernel-debug-devel
kernel-debug-core
kernel-debug
kernel-core

Install update from vendor's website.

Linux kernel - update to 5.10.155
kernel-headers - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
kernel-source - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
bpftool-debuginfo - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
python3-perf - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
python3-perf-debuginfo - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
kernel-debuginfo - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
perf-debuginfo - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
bpftool - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
kernel-debugsource - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
kernel-tools - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
kernel-devel - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
perf - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
kernel-tools-debuginfo - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
kernel-tools-devel - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
kernel - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
python3-perf - update to 5.10.134-14
perf - update to 5.10.134-14
kernel-tools-libs-devel - update to 5.10.134-14
kernel-tools-libs - update to 5.10.134-14
kernel-tools - update to 5.10.134-14
kernel-modules-extra - update to 5.10.134-14
kernel-modules - update to 5.10.134-14
kernel-headers - update to 5.10.134-14
kernel-devel - update to 5.10.134-14
kernel-debug-modules-extra - update to 5.10.134-14
kernel-debug-modules - update to 5.10.134-14
kernel-debug-devel - update to 5.10.134-14
kernel-debug-core - update to 5.10.134-14
kernel-debug - update to 5.10.134-14
kernel-core - update to 5.10.134-14
kernel - update to 5.10.134-14
bpftool - update to 5.10.134-14

• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.10.161&id=0f544353fec8e717d37724d95b92538e1de79e86
• https://www.openwall.com/lists/oss-security/2022/12/22/2
• http://www.openwall.com/lists/oss-security/2022/12/27/1

• Denial of service in Linux kernel io_sqpoll_wait_sq
• openEuler 22.03 LTS SP1 update for kernel
• openEuler 22.03 LTS update for kernel
• Anolis OS update for kernel