{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"0e4626de856ef8f25ecd9c716e76d4f95ce95639","status":"affected","version":"390ed29b5e425ba00da2b6113b74a14949f71b02","versionType":"git"},{"lessThan":"91482864768a874c4290ef93b84a78f4f1dac51b","status":"affected","version":"390ed29b5e425ba00da2b6113b74a14949f71b02","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"5.19"},{"lessThan":"5.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.10","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.1","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2022-49791","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: fix multishot accept request leaks\n\nHaving REQ_F_POLLED set doesn't guarantee that the request is\nexecuted as a multishot from the polling path. Fortunately for us, if\nthe code thinks it's multishot issue when it's not, it can only ask to\nskip completion so leaking the request. Use issue_flags to mark\nmultipoll issues.","epss":{"date":"2026-11-05","percentile":0.06471,"score":0.0017},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793908188997,"publishedAt":1746108563010,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/0e4626de856ef8f25ecd9c716e76d4f95ce95639"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/91482864768a874c4290ef93b84a78f4f1dac51b"}],"remediation":[],"revision":"00ddee8e8afc854f71893adca2bec026e6a2d266a4cda0340e3f71005237635f","sources":[{"modifiedAt":1793908188997,"name":"CNA: Linux","retrievedAt":1793909425096,"url":"https://www.cve.org/CVERecord?id=CVE-2022-49791"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793909455478,"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-49791"}],"ssvc":{"assessedAt":1793908086115,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"io_uring: fix multishot accept request leaks","updatedAt":1793909455478}