CVE-2022-49144

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-49144
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49144.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-49144
Downstream
Related
Published
2025-02-26T01:55:13Z
Modified
2025-10-21T09:30:24.119309Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
io_uring: fix memory leak of uid in files registration
Details

In the Linux kernel, the following vulnerability has been resolved:

io_uring: fix memory leak of uid in files registration

When there are no files for _iosqefilesscm() to process in the range, it'll free everything and return. However, it forgets to put uid.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
08a451739a9b5783f67de51e84cb6d9559bb9dc4
Fixed
b27de7011cb3ba14b047be2cee0ed8278368665b
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
08a451739a9b5783f67de51e84cb6d9559bb9dc4
Fixed
0853bd6885c2f293d88aaa7f7f1702c959b31680
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
08a451739a9b5783f67de51e84cb6d9559bb9dc4
Fixed
d6d7a517e81accf6ed22d55684baea763d2dbe43
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
08a451739a9b5783f67de51e84cb6d9559bb9dc4
Fixed
7fa8b228c3f30060b9f4b24bb9aaaf41b0ae83fe
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
08a451739a9b5783f67de51e84cb6d9559bb9dc4
Fixed
c86d18f4aa93e0e66cda0e55827cd03eea6bc5f8

Affected versions

v5.*

v5.10
v5.10-rc1
v5.10-rc2
v5.10-rc3
v5.10-rc4
v5.10-rc5
v5.10-rc6
v5.10-rc7
v5.10.1
v5.10.10
v5.10.100
v5.10.101
v5.10.102
v5.10.103
v5.10.104
v5.10.105
v5.10.106
v5.10.107
v5.10.108
v5.10.109
v5.10.11
v5.10.12
v5.10.13
v5.10.14
v5.10.15
v5.10.16
v5.10.17
v5.10.18
v5.10.19
v5.10.2
v5.10.20
v5.10.21
v5.10.22
v5.10.23
v5.10.24
v5.10.25
v5.10.26
v5.10.27
v5.10.28
v5.10.29
v5.10.3
v5.10.30
v5.10.31
v5.10.32
v5.10.33
v5.10.34
v5.10.35
v5.10.36
v5.10.37
v5.10.38
v5.10.39
v5.10.4
v5.10.40
v5.10.41
v5.10.42
v5.10.43
v5.10.44
v5.10.45
v5.10.46
v5.10.47
v5.10.48
v5.10.49
v5.10.5
v5.10.50
v5.10.51
v5.10.52
v5.10.53
v5.10.54
v5.10.55
v5.10.56
v5.10.57
v5.10.58
v5.10.59
v5.10.6
v5.10.60
v5.10.61
v5.10.62
v5.10.63
v5.10.64
v5.10.65
v5.10.66
v5.10.67
v5.10.68
v5.10.69
v5.10.7
v5.10.70
v5.10.71
v5.10.72
v5.10.73
v5.10.74
v5.10.75
v5.10.76
v5.10.77
v5.10.78
v5.10.79
v5.10.8
v5.10.80
v5.10.81
v5.10.82
v5.10.83
v5.10.84
v5.10.85
v5.10.86
v5.10.87
v5.10.88
v5.10.89
v5.10.9
v5.10.90
v5.10.91
v5.10.92
v5.10.93
v5.10.94
v5.10.95
v5.10.96
v5.10.97
v5.10.98
v5.10.99
v5.11
v5.11-rc1
v5.11-rc2
v5.11-rc3
v5.11-rc4
v5.11-rc5
v5.11-rc6
v5.11-rc7
v5.12
v5.12-rc1
v5.12-rc1-dontuse
v5.12-rc2
v5.12-rc3
v5.12-rc4
v5.12-rc5
v5.12-rc6
v5.12-rc7
v5.12-rc8
v5.13
v5.13-rc1
v5.13-rc2
v5.13-rc3
v5.13-rc4
v5.13-rc5
v5.13-rc6
v5.13-rc7
v5.14
v5.14-rc1
v5.14-rc2
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.15.1
v5.15.10
v5.15.11
v5.15.12
v5.15.13
v5.15.14
v5.15.15
v5.15.16
v5.15.17
v5.15.18
v5.15.19
v5.15.2
v5.15.20
v5.15.21
v5.15.22
v5.15.23
v5.15.24
v5.15.25
v5.15.26
v5.15.27
v5.15.28
v5.15.29
v5.15.3
v5.15.30
v5.15.31
v5.15.32
v5.15.4
v5.15.5
v5.15.6
v5.15.7
v5.15.8
v5.15.9
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.16.1
v5.16.10
v5.16.11
v5.16.12
v5.16.13
v5.16.14
v5.16.15
v5.16.16
v5.16.17
v5.16.18
v5.16.2
v5.16.3
v5.16.4
v5.16.5
v5.16.6
v5.16.7
v5.16.8
v5.16.9
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.17.1
v5.4
v5.4-rc6
v5.4-rc7
v5.4-rc8
v5.5
v5.5-rc1
v5.5-rc2
v5.5-rc3
v5.5-rc4
v5.5-rc5
v5.5-rc6
v5.5-rc7
v5.6
v5.6-rc1
v5.6-rc2
v5.6-rc3
v5.6-rc4
v5.6-rc5
v5.6-rc6
v5.6-rc7
v5.7
v5.7-rc1
v5.7-rc2
v5.7-rc3
v5.7-rc4
v5.7-rc5
v5.7-rc6
v5.7-rc7
v5.8
v5.8-rc1
v5.8-rc2
v5.8-rc3
v5.8-rc4
v5.8-rc5
v5.8-rc6
v5.8-rc7
v5.9
v5.9-rc1
v5.9-rc2
v5.9-rc3
v5.9-rc4
v5.9-rc5
v5.9-rc6
v5.9-rc7
v5.9-rc8

Database specific

vanir_signatures

[
    {
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0853bd6885c2f293d88aaa7f7f1702c959b31680",
        "id": "CVE-2022-49144-24d89588",
        "signature_version": "v1",
        "target": {
            "file": "fs/io_uring.c"
        },
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "221255045690552853345404380195809525010",
                "21936254845235850788254163497743696891",
                "114611846118937103879099348436125247957",
                "87395115947601187895730132488508076571"
            ],
            "threshold": 0.9
        }
    },
    {
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7fa8b228c3f30060b9f4b24bb9aaaf41b0ae83fe",
        "id": "CVE-2022-49144-320849c9",
        "signature_version": "v1",
        "target": {
            "function": "__io_sqe_files_scm",
            "file": "fs/io_uring.c"
        },
        "signature_type": "Function",
        "digest": {
            "function_hash": "287852008562986179182300999679098520331",
            "length": 976.0
        }
    },
    {
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7fa8b228c3f30060b9f4b24bb9aaaf41b0ae83fe",
        "id": "CVE-2022-49144-4f4281bb",
        "signature_version": "v1",
        "target": {
            "file": "fs/io_uring.c"
        },
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "221255045690552853345404380195809525010",
                "21936254845235850788254163497743696891",
                "114611846118937103879099348436125247957",
                "87395115947601187895730132488508076571"
            ],
            "threshold": 0.9
        }
    },
    {
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b27de7011cb3ba14b047be2cee0ed8278368665b",
        "id": "CVE-2022-49144-656ef39d",
        "signature_version": "v1",
        "target": {
            "function": "__io_sqe_files_scm",
            "file": "fs/io_uring.c"
        },
        "signature_type": "Function",
        "digest": {
            "function_hash": "326197906448757667107002734470331092083",
            "length": 977.0
        }
    },
    {
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d6d7a517e81accf6ed22d55684baea763d2dbe43",
        "id": "CVE-2022-49144-83a305c9",
        "signature_version": "v1",
        "target": {
            "function": "__io_sqe_files_scm",
            "file": "fs/io_uring.c"
        },
        "signature_type": "Function",
        "digest": {
            "function_hash": "287852008562986179182300999679098520331",
            "length": 976.0
        }
    },
    {
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0853bd6885c2f293d88aaa7f7f1702c959b31680",
        "id": "CVE-2022-49144-86f21cf1",
        "signature_version": "v1",
        "target": {
            "function": "__io_sqe_files_scm",
            "file": "fs/io_uring.c"
        },
        "signature_type": "Function",
        "digest": {
            "function_hash": "287852008562986179182300999679098520331",
            "length": 976.0
        }
    },
    {
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c86d18f4aa93e0e66cda0e55827cd03eea6bc5f8",
        "id": "CVE-2022-49144-8a551558",
        "signature_version": "v1",
        "target": {
            "file": "fs/io_uring.c"
        },
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "221255045690552853345404380195809525010",
                "21936254845235850788254163497743696891",
                "114611846118937103879099348436125247957",
                "87395115947601187895730132488508076571"
            ],
            "threshold": 0.9
        }
    },
    {
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b27de7011cb3ba14b047be2cee0ed8278368665b",
        "id": "CVE-2022-49144-8eab4acb",
        "signature_version": "v1",
        "target": {
            "file": "fs/io_uring.c"
        },
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "221255045690552853345404380195809525010",
                "21936254845235850788254163497743696891",
                "114611846118937103879099348436125247957",
                "87395115947601187895730132488508076571"
            ],
            "threshold": 0.9
        }
    },
    {
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d6d7a517e81accf6ed22d55684baea763d2dbe43",
        "id": "CVE-2022-49144-a3a06743",
        "signature_version": "v1",
        "target": {
            "file": "fs/io_uring.c"
        },
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "221255045690552853345404380195809525010",
                "21936254845235850788254163497743696891",
                "114611846118937103879099348436125247957",
                "87395115947601187895730132488508076571"
            ],
            "threshold": 0.9
        }
    },
    {
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c86d18f4aa93e0e66cda0e55827cd03eea6bc5f8",
        "id": "CVE-2022-49144-e641fb39",
        "signature_version": "v1",
        "target": {
            "function": "__io_sqe_files_scm",
            "file": "fs/io_uring.c"
        },
        "signature_type": "Function",
        "digest": {
            "function_hash": "287852008562986179182300999679098520331",
            "length": 976.0
        }
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.110
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.33
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.16.19
Type
ECOSYSTEM
Events
Introduced
5.17.0
Fixed
5.17.2