VYPR
Unrated severityNVD Advisory· Published Feb 15, 2024· Updated Mar 28, 2025

AIO credential reference count leak

CVE-2022-23090

Description

The aio_aqueue function, used by the lio_listio system call, fails to release a reference to a credential in an error case.

An attacker may cause the reference count to overflow, leading to a use after free (UAF).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • FreeBSD/FreeBSDllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 13.1-RELEASE

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.