CVE-2022-29582

In the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in io_uring timeouts. This can be triggered by a local user who has no access to any user namespace; however, the race condition perhaps can only be exploited infrequently.

• CWE-362

• http://www.openwall.com/lists/oss-security/2022/04/22/4Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2022/08/08/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2024/04/24/3
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.3Mailing List, Vendor Advisory
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e677edbcabee849bfdd43f1602bccbecf736a646Mailing List, Patch, Vendor Advisory
• https://github.com/Ruia-ruia/CVE-2022-29582-ExploitThird Party Advisory
• https://github.com/torvalds/linux/commit/e677edbcabee849bfdd43f1602bccbecf736a646Patch, Third Party Advisory
• https://ruia-ruia.github.io/2022/08/05/CVE-2022-29582-io-uring/Exploit, Third Party Advisory
• https://www.debian.org/security/2022/dsa-5127Third Party Advisory
• https://www.openwall.com/lists/oss-security/2022/04/22/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2022/04/22/4Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2022/08/08/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2024/04/24/3
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.3Mailing List, Vendor Advisory
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e677edbcabee849bfdd43f1602bccbecf736a646Mailing List, Patch, Vendor Advisory
• https://github.com/Ruia-ruia/CVE-2022-29582-ExploitThird Party Advisory
• https://github.com/torvalds/linux/commit/e677edbcabee849bfdd43f1602bccbecf736a646Patch, Third Party Advisory
• https://ruia-ruia.github.io/2022/08/05/CVE-2022-29582-io-uring/Exploit, Third Party Advisory
• https://www.debian.org/security/2022/dsa-5127Third Party Advisory
• https://www.openwall.com/lists/oss-security/2022/04/22/3Mailing List, Third Party Advisory

Published

Apr 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-2957A vulnerability classified as critical was found in SourceCo…9.8
• CVE-2022-29577OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smugglin…6.1
• CVE-2022-29578Meridian Cooperative Utility Software versions 22.02 and 22.…5.3
• CVE-2022-2958The BadgeOS WordPress plugin before 3.7.1.3 does not sanitis…8.8
• CVE-2022-29580There exists a path traversal vulnerability in the Android G…7.8
• CVE-2022-29581Improper Update of Reference Count vulnerability in net/sche…7.8
• CVE-2022-29583service_windows.go in the kardianos service package for Go o…7.8
• CVE-2022-29584Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 allows …5.4
• CVE-2022-29585In Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0, a s…7.5
• CVE-2022-29586Konica Minolta bizhub MFP devices before 2022-04-14 allow a …7.4
• CVE-2022-29587Konica Minolta bizhub MFP devices before 2022-04-14 have an …4
• CVE-2022-29588Konica Minolta bizhub MFP devices before 2022-04-14 use clea…7.5