CVE-2022-1882

תיאור (מקור, אנגלית)

A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free_pipe_info() that is already called. This flaw allows a local user to crash or potentially escalate their privileges on the system.

מדדים

CVSS 3.1

7.8 (HIGH) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-15/10/2026

CWE

CWE-416

מוצרים מושפעים

linux: linux kernel; netapp: h300s firmware; netapp: h300s; netapp: h500s firmware; netapp: h500s; netapp: h410c firmware; netapp: h410c; netapp: h700s firmware; netapp: h700s; netapp: h300e firmware; netapp: h300e; netapp: h500e firmware; netapp: h500e; netapp: h700e firmware; netapp: h700e

קישורים

• https://bugzilla.redhat.com/show_bug.cgi?id=2089701 Issue TrackingPatchThird Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2089701 Issue TrackingPatchThird Party Advisory
• https://lore.kernel.org/lkml/20220507115605.96775-1-tcs.kernel%40gmail.com/T/
• https://security.netapp.com/advisory/ntap-20220715-0002/ Third Party Advisory
• https://lore.kernel.org/lkml/20220507115605.96775-1-tcs.kernel%40gmail.com/T/
• https://security.netapp.com/advisory/ntap-20220715-0002/ Third Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-794697.html
• https://cert-portal.siemens.com/productcert/html/ssa-831302.html