CVE-2022-1184

MEDIUM

Linux Kernel >=2.6.12 <4.9.138 - Use-After-Free in ext4 Filesystem dx_insert_block

Title source: llm
STIX 2.1

Description

A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service.

References (5)

Core 5
Core References
Third Party Advisory vendor-advisory
https://www.debian.org/security/2022/dsa-5257
Mailing List, Third Party Advisory mailing-list
https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
Issue Tracking, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2070205
Patch, Third Party Advisory
https://ubuntu.com/security/CVE-2022-1184

Scores

CVSS v3 5.5
EPSS 0.0002
EPSS Percentile 7.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-416
Status published
Products (10)
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 16.04
canonical/ubuntu_linux 18.04
canonical/ubuntu_linux 20.04
debian/debian_linux 10.0
debian/debian_linux 11.0
linux/linux_kernel 2.6.12 (6 CPE variants)
linux/linux_kernel 2.6.12 - 4.9.138
redhat/enterprise_linux 8.0
redhat/enterprise_linux 9.0
Published Aug 29, 2022
Tracked Since Feb 18, 2026