Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2022-23090

AIO credential reference count leak

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
freebsd

Description

The aio_aqueue function, used by the lio_listio system call, fails to release a reference to a credential in an error case. An attacker may cause the reference count to overflow, leading to a use after free (UAF).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FreeBSD FreeBSD

Default version status: unknown

  • 13.1-RELEASE to < p1affected
  • 13.0-RELEASE to < p12affected
  • 12.3-RELEASE to < p6affected

References