Vulnerability in Linux
CVE-2022-49791
In the Linux kernel, the following vulnerability has been resolved: io_uring: fix multishot accept request leaks Having REQ_F_POLLED set doesn't guarantee that the request is executed as a multishot from the polling path. Fortunately for us, if the code thinks it's multishot issue when it's not, it can only ask to skip completion so leaking the request. Use issue_flags to mark multipoll issues.
EPSS: 0.001 (4.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions 390ed29b5e425ba00da2b6113b74a14949f71b02, 5.19, 0
- Linux Linux_kernel — versions 6.1
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2022-49791?
- CVE-2022-49791 is a medium-severity vulnerability in Linux, classified under Missing Release of Memory after Effective Lifetime. CVSS score: 5.5/10. Published 2025-05-01.
- How severe is CVE-2022-49791?
- Medium severity. CVSS v3 base score is 5.5 out of 10.