CVE-2022-2602

Опубликовано: 08 янв. 2024

Источник: nvd

CVSS3: 5.3

CVSS3: 7

EPSS Низкий

Описание

io_uring UAF, Unix SCM garbage collection

Ссылки

http://packetstormsecurity.com/files/176533/Linux-Broken-Unix-GC-Interaction-Use-After-Free.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2602
Third Party Advisory
https://ubuntu.com/security/notices/USN-5691-1
Third Party Advisory
https://ubuntu.com/security/notices/USN-5692-1
Third Party Advisory
https://ubuntu.com/security/notices/USN-5693-1
Third Party Advisory
https://ubuntu.com/security/notices/USN-5700-1
Third Party Advisory
https://ubuntu.com/security/notices/USN-5752-1
Third Party Advisory
http://packetstormsecurity.com/files/176533/Linux-Broken-Unix-GC-Interaction-Use-After-Free.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2602
Third Party Advisory
https://ubuntu.com/security/notices/USN-5691-1
Third Party Advisory
https://ubuntu.com/security/notices/USN-5692-1
Third Party Advisory
https://ubuntu.com/security/notices/USN-5693-1
Third Party Advisory
https://ubuntu.com/security/notices/USN-5700-1
Third Party Advisory
https://ubuntu.com/security/notices/USN-5752-1
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 6.0.19 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:22.10:*:*:*:-:*:*:*

EPSS

Процентиль: 74%

0.00855

Низкий

5.3 Medium

CVSS3

7 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2022-2602

CVSS3: 5.3

ubuntu

больше 1 года назад

io_uring UAF, Unix SCM garbage collection

CVE-2022-2602

CVSS3: 7

redhat

больше 2 лет назад

io_uring UAF, Unix SCM garbage collection

CVE-2022-2602

CVSS3: 7

msrc

больше 1 года назад

Описание отсутствует

CVE-2022-2602

CVSS3: 5.3

debian

больше 1 года назад

io_uring UAF, Unix SCM garbage collection

SUSE-SU-2023:0339-1

suse-cvrf

больше 2 лет назад

Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP3)

EPSS

Процентиль: 74%

0.00855

Низкий

5.3 Medium

CVSS3

7 High

CVSS3

Дефекты

CWE-416