Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-49791

io_uring: fix multishot accept request leaks

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix multishot accept request leaks Having REQ_F_POLLED set doesn't guarantee that the request is executed as a multishot from the polling path. Fortunately for us, if the code thinks it's multishot issue when it's not, it can only ask to skip completion so leaking the request. Use issue_flags to mark multipoll issues.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 390ed29b5e425ba00da2b6113b74a14949f71b02 to < 0e4626de856ef8f25ecd9c716e76d4f95ce95639affected
  • 390ed29b5e425ba00da2b6113b74a14949f71b02 to < 91482864768a874c4290ef93b84a78f4f1dac51baffected

Linux Linux

Default version status: affected

  • 5.19affected
  • 0 to < 5.19unaffected
  • 6.0.10 to ≤ 6.0.*unaffected
  • 6.1 to ≤ *unaffected

References