CVE-2022-50234

CVE-2022-50234 · io_uring/af_unix: defer registered files gc to io_uring release

CVSS 7.8 · High · EPSS 0.2% · Fix available

dpkg-query -W -f='${source:Package} ${binary:Package} ${Version}\n' | awk '$1=="linux"'

curl -fsSL https://patchfirst.dev/check.sh | sh

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

In the Linux kernel, the following vulnerability has been resolved: io_uring/af_unix: defer registered files gc to io_uring release Instead of putting io_uring's registered files in unix_gc() we want it to be done by io_uring itself. The trick here is to consider io_uring registered files for cycle detection but not actually putting them down. Because io_uring can't register other ring instances, this will remove all refs to the ring file triggering the ->release path and clean up with io_ring_ctx_free(). [axboe: add kerneldoc comment to skb, fold in skb leak fix]

Published

2025-09-15T14:01:38.199Z

Updated

2026-08-05T08:57:50.462Z

Stack: system

Check your server →