CVE-2022-29582: CVE-2022-29582

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-29582

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

In the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in io_uring timeouts. This can be triggered by a local user who has no access to any user namespace; however, the race condition perhaps can only be exploited infrequently.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

Linux kernel 竞争条件问题漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel5.17.3 之前版本存在竞争条件问题漏洞，该漏洞源于 io_uring 超时中的竞争条件，fs/io_uring.c 具有 use-after-free。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2022-29582

#	POC Description	Source Link	Shenlong Link
1	Exploit for CVE-2022-29582 targeting Google's Kernel CTF	https://github.com/Ruia-ruia/CVE-2022-29582-Exploit	POC Details

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2022-29582

Please Login to view more intelligence information

https://github.com/torvalds/linux/commit/e677edbcabee849bfdd43f1602bccbecf736a646x_refsource_MISC
https://ruia-ruia.github.io/2022/08/05/CVE-2022-29582-io-uring/x_refsource_MISC
https://www.openwall.com/lists/oss-security/2022/04/22/3x_refsource_MISC
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.3x_refsource_MISC
https://github.com/Ruia-ruia/CVE-2022-29582-Exploitx_refsource_MISC
https://www.debian.org/security/2022/dsa-5127vendor-advisoryx_refsource_DEBIAN
http://www.openwall.com/lists/oss-security/2022/08/08/3mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2022/04/22/4mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2024/04/24/3mailing-list
https://nvd.nist.gov/vuln/detail/CVE-2022-29582

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2022-29582

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

I. Basic Information for CVE-2022-29582

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2022-29582

III. Intelligence Information for CVE-2022-29582

IV. Related Vulnerabilities

V. Comments for CVE-2022-29582

Leave a comment