CVE-2022-1043

highpriority · attend · 46EPSS 0.039 · 90 %ileexploit · weaponizedDEEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · weaponized

Likely / severe?

3.86% (90th) EPSS

CVSS 8.8 · high

Is it mine?

8 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-27

A flaw was found in the Linux kernel’s io_uring implementation. This flaw allows an attacker with a local account to corrupt system memory, crash the system or escalate privileges.

cvss

Technical severity, 0–10. One row per scoring source.

8.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.18.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 2 · impact 6

v3.18.8highAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.18.6highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:Fsecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-416USCWE-416US

exploits (1)

Public proof-of-concept and weaponised exploit code.

exploit/linux/local/cve_2022_1043_io_uring_priv_escio_uring Same Type Object Reuse Priv Escweaponized · metasploit

affected products (8)

Products and version ranges known to be affected.

NetApp ActiveIQ Unified Manager for VMware vSphereall versionscert_bundDEcpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere
Open Source Linux Kernelall versionscert_bundDEcpe:/o:linux:linux_kernel:-
Ubuntu Linuxall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:-
n/a Kernel≤ Fixed in kernel v5.14 rc7enisa_euvdEU
Сообщество свободного программного обеспечения Linux5.10.0 → 5.10.60fstec_bduRU
Сообщество свободного программного обеспечения Linux5.12 → 5.13.12fstec_bduRU
linux linux kernel5.10.51 → 5.10.61nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux kernel5.11 → 5.13.13nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2022-1323Linux Kernel: Mehrere SchwachstellenDeutsch2022-09-06csaf · cert_bundDE
Ein entfernter, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um Informationen offenzulegen, den Systemspeicher zu beschädigen, einen Denial-of-Service-Zustand zu verursachen und seine Privilegien zu erweitern.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund nvd NVD CVE.org MITRE

published 2022-08-29modified 2026-06-17

references (17)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan