CVE-2022-2318

    Dashboard / Vulnerabilities / CVE-2022-2318

    CVE-2022-2318

    Published: 6 Jul 2022Last Modified: 21 Oct 2026

    Summary:

    Details: There are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of linux that allow attackers to crash linux kernel without any privileges.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2318.json, https://nvd.nist.gov/vuln/detail/CVE-2022-2318, https://security.netapp.com/advisory/ntap-20230120-0001/, https://www.debian.org/security/2022/dsa-5191, https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6, https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 88084a3df1672e131ddc1b4e39eeacfd39864acf
    Fixed -9cc02ede696272c5271a401e4f27c262359bc2f6

    Affected versions

    Linux Kernel version prior to kernel 5.19 rc5

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-2318 | CVE-DB