CVE-2022-23090

The aio_aqueue function, used by the lio_listio system call, fails to release a reference to a credential in an error case.

An attacker may cause the reference count to overflow, leading to a use after free (UAF).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.7 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
freebsdCNA
---
---
CVEADP
---
---
CISA-ADPADP
7.7 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 40%
VendorProductVersion
freebsdfreebsd
12.3:beta1
freebsdfreebsd
12.3:p1
freebsdfreebsd
12.3:p2
freebsdfreebsd
12.3:p3
freebsdfreebsd
12.3:p4
freebsdfreebsd
12.3:p5
freebsdfreebsd
13.0:beta1
freebsdfreebsd
13.0:beta2
freebsdfreebsd
13.0:beta3
freebsdfreebsd
13.0:beta3-p1
freebsdfreebsd
13.0:beta4
freebsdfreebsd
13.0:p1
freebsdfreebsd
13.0:p10
freebsdfreebsd
13.0:p11
freebsdfreebsd
13.0:p2
freebsdfreebsd
13.0:p3
freebsdfreebsd
13.0:p4
freebsdfreebsd
13.0:p5
freebsdfreebsd
13.0:p6
freebsdfreebsd
13.0:p7
freebsdfreebsd
13.0:p8
freebsdfreebsd
13.0:p9
freebsdfreebsd
13.0:rc1
freebsdfreebsd
13.0:rc2
freebsdfreebsd
13.0:rc3
freebsdfreebsd
13.0:rc4
freebsdfreebsd
13.0:rc5
freebsdfreebsd
13.0:rc5-p1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://security.freebsd.org/advisories/FreeBSD-SA-22:10.aio.asc
https://security.netapp.com/advisory/ntap-20240415-0007/
https://security.freebsd.org/advisories/FreeBSD-SA-22:10.aio.asc
https://security.netapp.com/advisory/ntap-20240415-0007/