← Database

CVE-2022-1786

HIGH CVSS: 7.8 Published: 2022-06-02 Modified: 2026-06-17

Description

A use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets up a ring with IORING_SETUP_IOPOLL with more than one task completing submissions on this ring. This flaw allows a local user to crash or escalate their privileges on the system.

Affected Platforms

Netapp H410SNetapp H410CNetapp H300S FirmwareNetapp H300SNetapp H500SNetapp H410S FirmwareNetapp H700S FirmwareNetapp H410C FirmwareNetapp H500S FirmwareLinux Linux Kernel

Weakness Type

CWE-843, CWE-416, CWE-843

References