Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Use After Free vulnerability in Linux Kernel allows Privilege Escalation. An improper Update of Reference Count in io_uring leads to Use-After-Free and Local Privilege Escalation. When io_msg_ring was invoked with a fixed file, it called io_fput_file() which improperly decreased its reference count (leading to Use-After-Free and Local Privilege Escalation). Fixed files are permanently registered to the ring, and should not be put separately. We recommend upgrading past commit https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679 https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
@h0mbre_ got some slop4u https://www.slop4u.ai/Linux-Kernel-CVE-2022-3910-LPE/
Post summary
The tweet links to a site titled 'Linux-Kernel-CVE-2022-3910-LPE', implying a PoC for a Linux kernel local privilege escalation vulnerability. No additional details on exploitation, active use, patches, or mitigation are provided.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 6.0 | - | - |
| OS | linux | linux_kernel | 6.0 | - | - |
| OS | linux | linux_kernel | 6.0 | - | - |
| OS | linux | linux_kernel | 6.0 | - | - |
| OS | linux | linux_kernel | 6.0 | - | - |