CVE-2022-1011
גבוהה 7.8
תיאור (מקור, אנגלית)
A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.
מדדים
- CVSS 3.1
-
7.8 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 1% (אחוזון 100) נכון ל-18/10/2026
- CWE
- CWE-416
מוצרים מושפעים
linux: linux kernel; fedoraproject: fedora; redhat: build of quarkus; redhat: developer tools; redhat: enterprise linux; redhat: enterprise linux eus; redhat: enterprise linux for ibm z systems; redhat: enterprise linux for ibm z systems eus; redhat: enterprise linux for power little endian; redhat: enterprise linux for power little endian eus; redhat: enterprise linux for real time; redhat: enterprise linux for real time for nfv; redhat: enterprise linux for real time for nfv tus; redhat: enterprise linux for real time tus; redhat: enterprise linux server aus
קישורים
- https://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse.git/commit/?h=fo… Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse.git/commit/?h=fo… Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2064855 Issue TrackingThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html Mailing ListThird Party Advisory
- https://www.debian.org/security/2022/dsa-5173 Third Party Advisory
- https://www.oracle.com/security-alerts/cpujul2022.html Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2064855 Issue TrackingThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html Mailing ListThird Party Advisory
- https://www.debian.org/security/2022/dsa-5173 Third Party Advisory
- https://www.oracle.com/security-alerts/cpujul2022.html Third Party Advisory