CVE-2022-2602

io_uring UAF, Unix SCM garbage collection

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 4.2

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
http://packetstormsecurity.com/files/176533/Linux-Broken-Unix-GC-Interaction-Use-After-Free.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2602	Third Party Advisory
https://ubuntu.com/security/notices/USN-5691-1	Third Party Advisory
https://ubuntu.com/security/notices/USN-5692-1	Third Party Advisory
https://ubuntu.com/security/notices/USN-5693-1	Third Party Advisory
https://ubuntu.com/security/notices/USN-5700-1	Third Party Advisory
https://ubuntu.com/security/notices/USN-5752-1	Third Party Advisory
http://packetstormsecurity.com/files/176533/Linux-Broken-Unix-GC-Interaction-Use-After-Free.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2602	Third Party Advisory
https://ubuntu.com/security/notices/USN-5691-1	Third Party Advisory
https://ubuntu.com/security/notices/USN-5692-1	Third Party Advisory
https://ubuntu.com/security/notices/USN-5693-1	Third Party Advisory
https://ubuntu.com/security/notices/USN-5700-1	Third Party Advisory
https://ubuntu.com/security/notices/USN-5752-1	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR	cpe:2.3:o:canonical:ubuntu_linux:18.04::::esm:::
	cpe:2.3:o:canonical:ubuntu_linux:20.04::::lts:::
	cpe:2.3:o:canonical:ubuntu_linux:22.04::::lts:::
	cpe:2.3:o:canonical:ubuntu_linux:22.10::::-:::

History

21 Nov 2024, 07:01

Type	Values Removed	Values Added
References	~~() http://packetstormsecurity.com/files/176533/Linux-Broken-Unix-GC-Interaction-Use-After-Free.html -~~	() http://packetstormsecurity.com/files/176533/Linux-Broken-Unix-GC-Interaction-Use-After-Free.html -
References	~~() https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2602 - Third Party Advisory~~	() https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2602 - Third Party Advisory
References	~~() https://ubuntu.com/security/notices/USN-5691-1 - Third Party Advisory~~	() https://ubuntu.com/security/notices/USN-5691-1 - Third Party Advisory
References	~~() https://ubuntu.com/security/notices/USN-5692-1 - Third Party Advisory~~	() https://ubuntu.com/security/notices/USN-5692-1 - Third Party Advisory
References	~~() https://ubuntu.com/security/notices/USN-5693-1 - Third Party Advisory~~	() https://ubuntu.com/security/notices/USN-5693-1 - Third Party Advisory
References	~~() https://ubuntu.com/security/notices/USN-5700-1 - Third Party Advisory~~	() https://ubuntu.com/security/notices/USN-5700-1 - Third Party Advisory
References	~~() https://ubuntu.com/security/notices/USN-5752-1 - Third Party Advisory~~	() https://ubuntu.com/security/notices/USN-5752-1 - Third Party Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~7.0~~	v2 : unknown v3 : 5.3

12 Jan 2024, 16:15

Type	Values Removed	Values Added
CWE		CWE-416
CPE		cpe:2.3:o:canonical:ubuntu_linux:22.10::::-::: cpe:2.3:o:canonical:ubuntu_linux:18.04::::esm::: cpe:2.3:o:linux:linux_kernel:::::::: cpe:2.3:o:canonical:ubuntu_linux:22.04::::lts::: cpe:2.3:o:canonical:ubuntu_linux:20.04::::lts:::
First Time		Linux Canonical Linux linux Kernel Canonical ubuntu Linux
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.0
References		() http://packetstormsecurity.com/files/176533/Linux-Broken-Unix-GC-Interaction-Use-After-Free.html -
References	~~() https://ubuntu.com/security/notices/USN-5700-1 -~~	() https://ubuntu.com/security/notices/USN-5700-1 - Third Party Advisory
References	~~() https://ubuntu.com/security/notices/USN-5691-1 -~~	() https://ubuntu.com/security/notices/USN-5691-1 - Third Party Advisory
References	~~() https://ubuntu.com/security/notices/USN-5693-1 -~~	() https://ubuntu.com/security/notices/USN-5693-1 - Third Party Advisory
References	~~() https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2602 -~~	() https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2602 - Third Party Advisory
References	~~() https://ubuntu.com/security/notices/USN-5752-1 -~~	() https://ubuntu.com/security/notices/USN-5752-1 - Third Party Advisory
References	~~() https://ubuntu.com/security/notices/USN-5692-1 -~~	() https://ubuntu.com/security/notices/USN-5692-1 - Third Party Advisory

08 Jan 2024, 18:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-01-08 18:15

Updated : 2024-11-21 07:01

NVD link : CVE-2022-2602

Mitre link : CVE-2022-2602

CVE.ORG link : CVE-2022-2602

JSON object : View

Products Affected

linux

linux_kernel

canonical

ubuntu_linux

CWE

CWE-416

Use After Free

5.3 /10