cve/2022/CVE-2022-3910.md

CVE-2022-3910

Description

Use After Free vulnerability in Linux Kernel allows Privilege Escalation. An improper Update of Reference Count in io_uring leads to Use-After-Free and Local Privilege Escalation. When io_msg_ring was invoked with a fixed file, it called io_fput_file() which improperly decreased its reference count (leading to Use-After-Free and Local Privilege Escalation). Fixed files are permanently registered to the ring, and should not be put separately. We recommend upgrading past commit fc7222c3a9 fc7222c3a9

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/veritas501/CVE-2022-3910
• https://github.com/xairy/linux-kernel-exploitation