Lucene search

K
cveRedhatCVE-2022-1184
HistoryAug 29, 2022 - 3:15 p.m.

CVE-2022-1184

2022-08-2915:15:10
CWE-416
redhat
web.nvd.nist.gov
242
8
security
vulnerability
cve-2022-1184
linux kernel
denial of service
nvd

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.2

Confidence

High

EPSS

0

Percentile

5.1%

A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service.

Affected configurations

Nvd
Node
linuxlinux_kernelRange2.6.124.9.138
OR
linuxlinux_kernelRange4.144.14.283
OR
linuxlinux_kernelRange4.194.19.247
OR
linuxlinux_kernelRange5.45.4.198
OR
linuxlinux_kernelRange5.105.10.121
OR
linuxlinux_kernelRange5.155.15.46
OR
linuxlinux_kernelRange5.175.17.14
OR
linuxlinux_kernelRange5.185.18.3
OR
linuxlinux_kernelMatch2.6.12-
OR
linuxlinux_kernelMatch2.6.12rc2
OR
linuxlinux_kernelMatch2.6.12rc3
OR
linuxlinux_kernelMatch2.6.12rc4
OR
linuxlinux_kernelMatch2.6.12rc5
OR
linuxlinux_kernelMatch2.6.12rc6
Node
redhatenterprise_linuxMatch8.0
OR
redhatenterprise_linuxMatch9.0
Node
debiandebian_linuxMatch10.0
OR
debiandebian_linuxMatch11.0
Node
canonicalubuntu_linuxMatch14.04esm
OR
canonicalubuntu_linuxMatch16.04esm
OR
canonicalubuntu_linuxMatch18.04esm
OR
canonicalubuntu_linuxMatch20.04lts
VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel2.6.12cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:*
linuxlinux_kernel2.6.12cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*
linuxlinux_kernel2.6.12cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*
linuxlinux_kernel2.6.12cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*
linuxlinux_kernel2.6.12cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*
linuxlinux_kernel2.6.12cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*
redhatenterprise_linux8.0cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
redhatenterprise_linux9.0cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
debiandebian_linux10.0cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Rows per page:
1-10 of 151

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Kernel",
    "versions": [
      {
        "version": "Not-known",
        "status": "affected"
      }
    ]
  }
]

Social References

More

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.2

Confidence

High

EPSS

0

Percentile

5.1%