CVE-2022-50234: io_uring/af_unix: defer registered files gc to io_uring release
Vulnerability summary
CVE-2022-50234 is a high (CVSS 7.8) vulnerability in linux. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 6.1% of scored vulnerabilities.
Not severe (CVSS 7.8, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 7 · Related 6Timeline
- 15-09-2025PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: io_uring/af_unix: defer registered files gc to io_uring release Instead of putting io_uring's registered files in unix_gc() we want it to be done by io_uring itself. The trick here is to consider io_uring registered files for cycle detection but not actually putting them down. Because io_uring can't register other ring instances, this will remove all refs to the ring file triggering the ->release path and clean up with io_ring_ctx_free(). [axboe: add kerneldoc comment to skb, fold in skb leak fix]
CVSS metrics
5 scores · 4 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.17%
Chance of exploitation in the next 30 days
Percentile
6%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.16% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu120 products
- linuxAll versions (No fix recorded)
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded)
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 6b06314c47e141031be043539900d80d2c7ba10f, < 04df9719df1865f6770af9bc7880874af0e594b2 | ≥ 6b06314c47e141031be043539900d80d2c7ba10f, < c378c479c5175833bb22ff71974cda47d7b05401 | ≥ 6b06314c47e141031be043539900d80d2c7ba10f, < 813d8fe5d30388f73a21d3a2bf46b0a1fd72498c | ≥ 6b06314c47e141031be043539900d80d2c7ba10f, < b4293c01ee0d0ecdd3cb5801e13f62271144667a | ≥ 6b06314c47e141031be043539900d80d2c7ba10f, < 75e94c7e8859e58aadc15a98cc9704edff47d4f2 | ≥ 6b06314c47e141031be043539900d80d2c7ba10f, < 0091bfc81741b8d3aeb3b7ab8636f911b2de6e80 | 5.1
- linux_kernel≥ 5.1, < 5.4.220 | ≥ 5.5, < 5.10.150 | ≥ 5.11, < 5.15.75 | ≥ 5.16, < 5.19.17 | ≥ 6.0, < 6.0.3
Debian1 product
- linux< 6.0.3-1
3 vendors · 123 products
