← CVE Tracker
7.5HIGH

CVE-2022-2327 — io_uring use work_flags to determine which identity need to grab from the calling process to make sure it…

Netapp · H300s Firmware · Published 22 Jul 2022 · Modified 2 Oct 2026

Description

io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect reference counts which can then lead to a double free. We recommend upgrading the kernel past commit df3f3bb5059d20ef094d6b2f0256c4bf4127a859

References

What to do
  1. Check whether H300s Firmware is in your asset inventory.
  2. Patch in the next maintenance window; prioritise internet-facing systems.
  3. Record the decision in your risk register for audit evidence.
Alert me on similar CVEs →
Share

Link: adminadda.com/cve/CVE-2022-2327