CVE-2022-28893

HIGH

Linux Kernel 5.1-5.17.2 - Use-After-Free in SUNRPC Subsystem

Title source: llm

The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the intended state.

Core 6

Core References

Patch, Third Party Advisory x_refsource_misc

Issue Tracking, Mailing List, Patch mailing-list x_refsource_mlist

Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist

Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist

Third Party Advisory x_refsource_confirm

Mailing List, Third Party Advisory vendor-advisory x_refsource_debian

CVSS v3 7.8

EPSS 0.0003

EPSS Percentile 8.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416

Status published

Products (13)

debian/debian_linux 11.0

linux/linux_kernel 5.1 - 5.4.196

netapp/h300e_firmware

netapp/h300s_firmware

netapp/h410c_firmware

netapp/h410s_firmware

netapp/h500e_firmware

netapp/h500s_firmware

netapp/h700e_firmware

netapp/h700s_firmware

... and 3 more

Published Apr 11, 2022

Tracked Since Feb 18, 2026