CVE-2022-2602

io_uring UAF, Unix SCM garbage collection

Credits

David Bouman

Billy Jheng Bing Jhong working with Trend Micro's Zero Day Initiative

References

https://ubuntu.com/security/notices/USN-5692-1

https://ubuntu.com/security/notices/USN-5752-1

https://ubuntu.com/security/notices/USN-5693-1

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2602

https://ubuntu.com/security/notices/USN-5691-1

https://ubuntu.com/security/notices/USN-5700-1

http://packetstormsecurity.com/files/176533/Linux-Broken-Unix-GC-Interaction-Use-After-Free.html