Lucene search

K
nvd[email protected]NVD:CVE-2022-1184
HistoryAug 29, 2022 - 3:15 p.m.

CVE-2022-1184

2022-08-2915:15:10
CWE-416
web.nvd.nist.gov
2
linux kernel
filesystem
use-after-free
denial of service

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%

A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service.

Affected configurations

NVD
Node
linuxlinux_kernelRange2.6.124.9.138
OR
linuxlinux_kernelRange4.144.14.283
OR
linuxlinux_kernelRange4.194.19.247
OR
linuxlinux_kernelRange5.45.4.198
OR
linuxlinux_kernelRange5.105.10.121
OR
linuxlinux_kernelRange5.155.15.46
OR
linuxlinux_kernelRange5.175.17.14
OR
linuxlinux_kernelRange5.185.18.3
OR
linuxlinux_kernelMatch2.6.12-
OR
linuxlinux_kernelMatch2.6.12rc2
OR
linuxlinux_kernelMatch2.6.12rc3
OR
linuxlinux_kernelMatch2.6.12rc4
OR
linuxlinux_kernelMatch2.6.12rc5
OR
linuxlinux_kernelMatch2.6.12rc6
Node
redhatenterprise_linuxMatch8.0
OR
redhatenterprise_linuxMatch9.0
Node
debiandebian_linuxMatch10.0
OR
debiandebian_linuxMatch11.0
Node
canonicalubuntu_linuxMatch14.04esm
OR
canonicalubuntu_linuxMatch16.04esm
OR
canonicalubuntu_linuxMatch18.04esm
OR
canonicalubuntu_linuxMatch20.04lts

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%