תיאור (מקור, אנגלית)
A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.
מוצרים מושפעים
linux: linux kernel; fedoraproject: fedora; redhat: build of quarkus; redhat: developer tools; redhat: enterprise linux; redhat: enterprise linux eus; redhat: enterprise linux for ibm z systems; redhat: enterprise linux for ibm z systems eus; redhat: enterprise linux for power little endian; redhat: enterprise linux for power little endian eus; redhat: enterprise linux for real time; redhat: enterprise linux for real time for nfv; redhat: enterprise linux for real time for nfv tus; redhat: enterprise linux for real time tus; redhat: enterprise linux server aus
קישורים10
- git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse.git/comm… Vendor Advisory
- git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse.git/comm… Vendor Advisory
- bugzilla.redhat.com/show_bug.cgi?id=2064855 Issue TrackingThird Party Advisory
- lists.debian.org/debian-lts-announce/2022/07/msg00000.html Mailing ListThird Party Advisory
- www.debian.org/security/2022/dsa-5173 Third Party Advisory
- www.oracle.com/security-alerts/cpujul2022.html Third Party Advisory
- bugzilla.redhat.com/show_bug.cgi?id=2064855 Issue TrackingThird Party Advisory
- lists.debian.org/debian-lts-announce/2022/07/msg00000.html Mailing ListThird Party Advisory
- www.debian.org/security/2022/dsa-5173 Third Party Advisory
- www.oracle.com/security-alerts/cpujul2022.html Third Party Advisory
מדדים
- CVSS 3.1
-
7.8
HIGH
מקור הציון: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 1% אחוזון 67 · נכון ל-4 בנובמבר 2026
- CWE
- CWE-416
האם אפשר לנצל את הפגיעות הזו אצלכם?
עדכון אבטחה סוגר את הפרצה הידועה. בדיקת חדירות מראה לאן תוקף עדיין יכול להגיע — עם הוכחה.