Dashboard / CVE-2022-49791

CVE-2022-49791

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-05-01 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix multishot accept request leaks Having REQ_F_POLLED set doesn't guarantee that the request is executed as a multishot from the polling path. Fortunately for us, if the code thinks it's multishot issue when it's not, it can only ask to skip completion so leaking the request. Use issue_flags to mark multipoll issues.

Weakness Classification (1)

Affected Software (9)

VendorProductVersion
Linux Linux 390ed29b5e425ba00da2b6113b74a14949f71b02 < 0e4626de856ef8f25ecd9c716e76d4f95ce95639
Linux Linux 390ed29b5e425ba00da2b6113b74a14949f71b02 < 91482864768a874c4290ef93b84a78f4f1dac51b
Linux Linux 5.19
linux linux_kernel 5.19 – 6.0.10
linux linux_kernel 6.1
linux linux_kernel 6.1
linux linux_kernel 6.1
linux linux_kernel 6.1
linux linux_kernel 6.1

References & Advisories (2)

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.17%
Raw Score 0.001700
Percentile 6.5%
Date 2026-11-05

Intelligence Sources

mitre ref →
nvd ref →

External Links