CVE-2022-1882 — Use After Free in Kernel
Severity
7.8HIGHNVD
OSV6.7
EPSS
0.0%
top 91.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMay 26
Latest updateJun 15
Description
A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free_pipe_info() that is already called. This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages11 packages
Patches
🔴Vulnerability Details
5OSV▶
linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-raspi vu↗2022-10-10
GHSA▶
GHSA-hmjf-2pvf-jr4v: A flaw use after free in the Linux kernel pipes functionality was found in the way user do some manipulations with pipe ex↗2022-05-27
OSV▶
CVE-2022-1882: A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() a↗2022-05-26