PT-2022-2424 · Linux+3 · Linux Kernel+3

Published 2022-04-28 · Updated 2025-09-29 · CVE-2022-29968

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.17.5

Description An issue was discovered in the Linux kernel where the io rw init file function in fs/io uring.c lacks initialization of kiocb->private. This issue is related to errors in initialization and may allow an attacker to gain unauthorized access to protected information.

Recommendations For Linux kernel versions through 5.17.5, update to a version newer than 5.17.5 to resolve the issue. At the moment, there is no information about other specific fixes for this issue.

Exploit

Fix

Improper Initialization

Weakness Enumeration

CWE-909

CWE-665

Related Identifiers

ALSA-2024_2394

ALSA-2025_16880

ALT-PU-2022-1835

ALT-PU-2022-1873

ALT-PU-2022-2152

ALT-PU-2022-2155

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-9596

BDU:2022-02817

CVE-2022-29968

OPENSUSE-SU-2024:12053-1

OPENSUSE-SU-2024:13704-1

USN-5471-1

Affected Products

Alt Linux

Linuxmint

Linux Kernel

Ubuntu

References · 226

• 🔥 https://github.com/jprx/CVE-2022-29968 · Exploit
• https://github.com/torvalds/linux/commit/32452a3eb8b64e01e2be717f518c0be046975b9d · Patch
• https://bdu.fstec.ru/vul/2022-02817 · Security Note
• https://ubuntu.com/security/CVE-2022-1836 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1205 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5471-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-21499 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12053-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5471-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-29968 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1012 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU7MT7BPTA2NG24BTLZF5ZWYTLSO7BU3 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-9596 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-29968 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-29968 · Vendor Advisory