Wind River Support Network

HomeDefectsLIN1022-38

Fixed

LIN1022-38 : Security Advisory - linux - CVE-2022-29582

Created: Apr 28, 2022 Updated: Jan 26, 2026

Resolved Date: May 9, 2022

Found In Version: 10.22.33.1

Fix Version: 10.22.33.1

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Kernel

Description

In the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in io_uring timeouts. This can be triggered by a local user who has no access to any user namespace; however, the race condition perhaps can only be exploited infrequently.