imPC@ndo IT

Tracker / CVE-2022-1882

CVE-2022-1882

High 7.8

A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free_pipe_info() that is already called. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Affected products and versions

linux linux_kernel · 5.10.106 → 5.10.134
linux linux_kernel · 5.15.29 → 5.15.58
linux linux_kernel · 5.16.15 → 5.18.15
netapp h300e_firmware
netapp h300s_firmware
netapp h410c_firmware
netapp h410s_firmware
netapp h500e_firmware
netapp h500s_firmware
netapp h700e_firmware
netapp h700s_firmware

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References