| |
Vulnerability CVE-2022-23090
Published: 2024-02-15
| Description: |
The aio_aqueue function, used by the lio_listio system call, fails to release a reference to a credential in an error case.
An attacker may cause the reference count to overflow, leading to a use after free (UAF). |
References: |
https://security.freebsd.org/advisories/FreeBSD-SA-22:10.aio.asc
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
