CVE-2022-23090 — AIO credential reference count leak
The aio_aqueue function, used by the lio_listio system call, fails to release a reference to a credential in an error case. An attacker may cause the reference count to overflo…
Published: 2024-02-15 · CVSS: 7.7 · CVSS 3.1
The aio_aqueue function, used by the lio_listio system call, fails to release a reference to a credential in an error case. An attacker may cause the reference count to overflow, leading to a use after free (UAF).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7