CVE-2022-50234

A flaw was found in the Linux kernel's io_uring/af_unix component. A local user could exploit improper handling of registered files during garbage collection. This vulnerability can lead to a memory leak, potentially causing a denial of service (DoS) on the system.

This vulnerability is rated as Moderate because exploitation requires local access with privileges to invoke io_uring system calls, limiting the risk primarily to localized resource exhaustion or denial of service rather than immediate privilege escalation. Under default Red Hat Enterprise Linux configurations, unprivileged users can interact with the io_uring interface and UNIX domain sockets, allowing an attacker to repeatedly trigger flawed garbage collection routines and leak kernel resources. Because the flaw cannot be triggered over an untrusted network and does not directly compromise system confidentiality or integrity, the overall operational severity remains bounded.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.