Findings

CVE-2022-2327

io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP.

Published Jul 22, 2022 · updated Oct 14, 2026 · netapp h300s firmware

io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect reference counts which can then lead to a double free. We recommend upgrading the kernel past commit df3f3bb5059d20ef094d6b2f0256c4bf4127a859

Timeline

Detection, updates, and resolution for this record.

  1. Jul 22, 2022 · NIST NVD

    Detected

    io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect reference counts which can then lead to a double free. We recommend upgrading the kernel past commit df3f3bb5059d20ef094d6b2f0256c4bf4127a859

  2. Oct 14, 2026 · NIST NVD

    Updated

    io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect reference counts which can then lead to a double free. We recommend upgrading the kernel past commit df3f3bb5059d20ef094d6b2f0256c4bf4127a859

Affected

  • cpe linux/linux kernelversion unspecified
  • cpe netapp/h300s firmwareversion unspecified
  • cpe netapp/h410c firmwareversion unspecified
  • cpe netapp/h410s firmwareversion unspecified
  • cpe netapp/h500s firmwareversion unspecified
  • cpe netapp/h700s firmwareversion unspecified

Sources

  • CVE.orgCVE-2022-2327

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2022-2327

    io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect reference counts which can then lead to a

    nvd.nist.gov

References

CVE-2022-2327 · ZeroDay Findings