CVE-2022-49144

io_uring: fix memory leak of uid in files registration

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix memory leak of uid in files registration When there are no files for __io_sqe_files_scm() to process in the range, it'll free everything and return. However, it forgets to put uid.

Category

5.5
CVSS
Severity: Medium
CVSS 3.1 •
EPSS 0.02%
Affected: Linux Linux
Affected: Linux Linux
Published at:
Updated at:

References

Link Tags
https://git.kernel.org/stable/c/b27de7011cb3ba14b047be2cee0ed8278368665b patch
https://git.kernel.org/stable/c/0853bd6885c2f293d88aaa7f7f1702c959b31680 patch
https://git.kernel.org/stable/c/d6d7a517e81accf6ed22d55684baea763d2dbe43 patch
https://git.kernel.org/stable/c/7fa8b228c3f30060b9f4b24bb9aaaf41b0ae83fe patch
https://git.kernel.org/stable/c/c86d18f4aa93e0e66cda0e55827cd03eea6bc5f8 patch

Frequently Asked Questions

What is the severity of CVE-2022-49144?
CVE-2022-49144 has been scored as a medium severity vulnerability.
How to fix CVE-2022-49144?
To fix CVE-2022-49144, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-49144 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2022-49144 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-49144?
CVE-2022-49144 affects Linux Linux, Linux Linux.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.