A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2022-1184 | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2070205 | Issue Tracking Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html | Mailing List Third Party Advisory |
| https://ubuntu.com/security/CVE-2022-1184 | Patch Third Party Advisory |
| https://www.debian.org/security/2022/dsa-5257 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
20 Dec 2023, 20:10
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:* |
21 Nov 2022, 19:46
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* | |
| References | (MLIST) https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html - Mailing List, Third Party Advisory |
01 Nov 2022, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* | |
| References |
|
|
| References | (DEBIAN) https://www.debian.org/security/2022/dsa-5257 - Third Party Advisory |
19 Oct 2022, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
06 Sep 2022, 12:38
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-08-29 15:15
Updated : 2024-02-04 22:51
NVD link : CVE-2022-1184
Mitre link : CVE-2022-1184
CVE.ORG link : CVE-2022-1184
JSON object : View
Products Affected
redhat
- enterprise_linux
debian
- debian_linux
linux
- linux_kernel
canonical
- ubuntu_linux
CWE
CWE-416
Use After Free