CVE-2022-2327

io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect reference counts which can then lead to a double free. We recommend upgrading the kernel past commit df3f3bb5059d20ef094d6b2f0256c4bf4127a859

• CWE-416
• CWE-415

• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-5.10.y&id=df3f3bb5059d20ef094d6b2f0256c4bf4127a859Mailing List, Patch, Vendor Advisory
• https://kernel.dance/#df3f3bb5059d20ef094d6b2f0256c4bf4127a859Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230203-0009/
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-5.10.y&id=df3f3bb5059d20ef094d6b2f0256c4bf4127a859Mailing List, Patch, Vendor Advisory
• https://kernel.dance/#df3f3bb5059d20ef094d6b2f0256c4bf4127a859Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230203-0009/

Published

Jul 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23264Microsoft Edge (Chromium-based) Spoofing Vulnerability4.7
• CVE-2022-23265Microsoft Defender for IoT Remote Code Execution Vulnerabili…7.2
• CVE-2022-23266Microsoft Defender for IoT Elevation of Privilege Vulnerabil…7.8
• CVE-2022-23267.NET and Visual Studio Denial of Service Vulnerability7.5
• CVE-2022-23268Windows Hyper-V Denial of Service Vulnerability6.5
• CVE-2022-23269Microsoft Dynamics GP Spoofing Vulnerability5.4
• CVE-2022-23270Windows Point-to-Point Tunneling Protocol Remote Code Execut…8.1
• CVE-2022-23271Microsoft Dynamics GP Elevation Of Privilege Vulnerability6.5
• CVE-2022-23272Microsoft Dynamics GP Elevation Of Privilege Vulnerability8.1
• CVE-2022-23273Microsoft Dynamics GP Elevation Of Privilege Vulnerability7.1
• CVE-2022-23274Microsoft Dynamics GP Remote Code Execution Vulnerability8.8
• CVE-2022-23276SQL Server for Linux Containers Elevation of Privilege Vulne…7.8