PT-2021-8040 · Linux+1 · Linux Kernel+1

Ga_Ryo + 1 · Published 2021-08-20 · Updated 2025-09-29 · CVE-2022-1043

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A flaw was found in the Linux kernel’s io uring implementation, allowing an attacker with a local account to corrupt system memory, crash the system, or escalate privileges. The issue is related to a use-after-free vulnerability in the io uring subsystem, which can be exploited to gain elevated privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2025_16880

ALT-PU-2021-2643

ALT-PU-2021-2644

ALT-PU-2021-2658

ALT-PU-2021-2659

ALT-PU-2021-2661

ALT-PU-2021-2691

ALT-PU-2021-2748

ALT-PU-2021-2778

ALT-PU-2021-2901

ALT-PU-2021-3477

ALT-PU-2021-3563

ALT-PU-2021-3573

ALT-PU-2023-4894

BDU:2024-04157

CVE-2022-1043

ZDI-22-362

Affected Products

Alt Linux

Linux Kernel

References · 23

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb · Exploit
• 🔥 https://github.com/opensrcsec/same_type_object_reuse_exploits/blob/main/cve-2022-1043.c · Exploit
• 🔥 http://packetstormsecurity.com/files/170834/io_uring-Same-Type-Object-Reuse-Privilege-Escalation.html · Exploit
• https://github.com/torvalds/linux/commit/a30f895ad3239f45012e860d4f94c1a388b36d14 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-1043 · Security Note
• https://bdu.fstec.ru/vul/2024-04157 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-1043 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-1043 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-1043 · Security Note
• https://ubuntu.com/security/CVE-2022-1043 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-1043 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-1043 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-22-362 · Security Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.13 · Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.61 · Note