kernel: use-after-free in nilfs_mdt_destroy
Published Aug 24, 2022
7.8
HIGHCVSS 3.1
EPSS 0.24%
Description
A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function nilfs_mdt_destroy. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.
Affected products
- Vendor n/a Product Kernel Defaultunknown
Affected
- Linux kernel 6.0-rc3
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| n/a | Kernel | unknown | Affected
|
Configuration 1
- ≥ 2.6.12 · < 4.9.331
- ≥ 4.10 · < 4.14.296
- ≥ 4.15 · < 4.19.262
- ≥ 4.20 · < 5.4.218
- ≥ 5.5 · < 5.10.148
- ≥ 5.11 · < 5.15.73
- ≥ 5.16 · < 5.19.15
- ≥ 6.0 · < 6.0.1
Configuration 2
- 10.0
No data.
Red Hat Enterprise Linux 6
kernel
Out of support scope
Red Hat Enterprise Linux 7
kernel
Not affected
Red Hat Enterprise Linux 7
kernel-rt
Not affected
Red Hat Enterprise Linux 8
kernel
Not affected
Red Hat Enterprise Linux 8
kernel-rt
Not affected
Red Hat Enterprise Linux 9
kernel
Not affected
Red Hat Enterprise Linux 9
kernel-rt
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel-rt | Not affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
No shipped kernel version was seen to be affected by this problem. These files are not built in our source code.
References (8)
- https://access.redhat.com/security/cve/CVE-2022-2978 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2120664 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-35199 Advisory
- https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html mailing-listMailing ListThird Party Advisory
- https://lore.kernel.org/linux-fsdevel/20220816040859.659129-1-dzm91%40hust.edu.cn/T/#u
- https://lore.kernel.org/linux-fsdevel/20220816040859.659129-1-dzm91@hust.edu.cn/T/#u
- https://nvd.nist.gov/vuln/detail/CVE-2022-2978
- https://www.cve.org/CVERecord?id=CVE-2022-2978
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
No data
GitHub
No data