CVE-2022-2602

io_uring UAF, Unix SCM garbage collection

Affected

The Linux Kernel Organization · linux

CVSS v3.1 NVD

7.0 HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 UBUNTU

5.3 MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

EPSS

1.43% chance of exploitation in the next 30 days, 73rd percentile

Published

2024-01-08

Updated

2026-10-14

Proof-of-concept exploits (4)

• LukeGix/CVE-2022-260285★ · 2022-12-22
• kiks7/CVE-2022-2602-Kernel-Exploit86★ · 2023-01-09
• th3-5had0w/CVE-2022-2602-Study1★ · 2023-01-09
• xidoo123/linux-kernel-exploitation0★ · 2024-11-02

Security advisories

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2602
• https://ubuntu.com/security/notices/USN-5691-1
• https://ubuntu.com/security/notices/USN-5692-1
• https://ubuntu.com/security/notices/USN-5693-1
• https://ubuntu.com/security/notices/USN-5700-1
• https://ubuntu.com/security/notices/USN-5752-1

References

• CVE Record
• NVD entry

Related

• CVE-2021-4034
• CVE-2020-27786
• CVE-2020-6468
• CVE-2016-5195
• CVE-2022-1786