CVE-2022-1998

2022-06-0914:46:48

CWE-416

redhat

www.cve.org

linux kernel

file system

use after free

vulnerability

privilege escalation

local user

AI Score

7.7

Confidence

High

EPSS

Percentile

5.1%

JSON

A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_records_to_user() call to fail in copy_event_to_user(). A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

CNA Affected

[
  {
    "product": "Kernel",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Linux kernel 5.17-rc3"
      }
    ]
  }
]

References

git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/notify/fanotify/fanotify_user.c?h=v5.17&id=ee12595147ac1fbfb5bcb23837e26dd58d94b15d

seclists.org/oss-sec/2022/q1/99

security.netapp.com/advisory/ntap-20220707-0009/