CVE-2022-3910
highpriority · track · 41EPSS 0.011 · 64 %ileexploit · PoCDEEURUUSEPSS · scored 2026-10-27
Use After Free vulnerability in Linux Kernel allows Privilege Escalation. An improper Update of Reference Count in io_uring leads to Use-After-Free and Local Privilege Escalation. When io_msg_ring was invoked with a fixed file, it called io_fput_file() which improperly decreased its reference count (leading to Use-After-Free and Local Privilege Escalation). Fixed files are permanently registered to the ring, and should not be put separately. We recommend upgrading past commit https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679 https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (2)
Public proof-of-concept and weaponised exploit code.
- TLD1027/CVE-2022-3910使用两种不同的角度实现对于CVE-2022-3910的利用PoC · poc_in_github
- veritas501/CVE-2022-3910CVE-2022-3910PoC · poc_in_github
affected products (6)
Products and version ranges known to be affected.
advisories (1)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2022-2157Linux Kernel: Schwachstelle ermöglicht PrivilegieneskalationDeutsch2022-11-22csaf · cert_bundDE
Ein lokaler Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um seine Privilegien zu erhöhen.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (15)
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/cve-2022-3910cnnvd
- https://cxsecurity.com/cveshow/CVE-2022-3910/cnnvd
- https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679cnnvd
- https://kernel.dance/#fc7222c3a9f56271fba02aabbfbae999042f1679cnnvd
- https://packetstormsecurity.com/files/170393/Ubuntu-Security-Notice-USN-5793-1.htmlcnnvd
- https://packetstormsecurity.com/files/170457/Ubuntu-Security-Notice-USN-5793-4.htmlcnnvd
- https://packetstormsecurity.com/files/170460/Ubuntu-Security-Notice-USN-5793-3.htmlcnnvd
- https://vigilance.fr/vulnerability/Linux-kernel-reuse-after-free-via-io-msg-ring-39950cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan