CVE-2022-47946

An issue was discovered in the Linux kernel 5.10.x before 5.10.155. A use-after-free in io_sqpoll_wait_sq in fs/io_uring.c allows an attacker to crash the kernel, resulting in denial of service. finish_wait can be skipped. An attack can occur in some situations by forking a process and then quickly terminating it. NOTE: later kernel versions, such as the 5.15 longterm series, substantially changed the implementation of io_sqpoll_wait_sq.

• CWE-416
• CWE-416

• http://www.openwall.com/lists/oss-security/2022/12/27/1Mailing List, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.10.161&id=0f544353fec8e717d37724d95b92538e1de79e86Mailing List, Patch, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2022/12/22/2Exploit, Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2022/12/27/1Mailing List, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.10.161&id=0f544353fec8e717d37724d95b92538e1de79e86Mailing List, Patch, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2022/12/22/2Exploit, Mailing List, Third Party Advisory

Published

Dec 23, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-4794The AAWP WordPress plugin before 3.12.3 can be used to abuse…7.5
• CVE-2022-47940An issue was discovered in ksmbd in the Linux kernel 5.15 th…8.1
• CVE-2022-47941An issue was discovered in ksmbd in the Linux kernel 5.15 th…7.5
• CVE-2022-47942An issue was discovered in ksmbd in the Linux kernel 5.15 th…8.8
• CVE-2022-47943An issue was discovered in ksmbd in the Linux kernel 5.15 th…8.1
• CVE-2022-47945ThinkPHP Framework before 6.0.14 allows local file inclusion…9.8
• CVE-2022-47949The Nintendo NetworkBuffer class, as used in Animal Crossing…9.8
• CVE-2022-4795The Galleries by Angie Makes WordPress plugin through 1.67 d…5.4
• CVE-2022-47950An issue was discovered in OpenStack Swift before 2.28.1, 2.…6.5
• CVE-2022-47951An issue was discovered in OpenStack Cinder before 19.1.2, 2…5.7
• CVE-2022-47952lxc-user-nic in lxc through 5.0.1 is installed setuid root, …3.3
• CVE-2022-4796Incorrect Use of Privileged APIs in GitHub repository usemem…8.1