GHSA-hmjf-2pvf-jr4vHighCVSS 7.8
A flaw use after free in the Linux kernel pipes functionality was found in the way user do some...
🔗 CVE IDs covered (1)
📋 Description
A flaw use after free in the Linux kernel pipes functionality was found in the way user do some manipulations with pipe ex. with the post_one_notification() after free_pipe_info() already called. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.
🔗 References (8)
- https://nvd.nist.gov/vuln/detail/CVE-2022-1882
- https://bugzilla.redhat.com/show_bug.cgi?id=2089701
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html
- https://cert-portal.siemens.com/productcert/html/ssa-831302.html
- https://lore.kernel.org/lkml/20220507115605.96775-1-tcs.kernel%40gmail.com/T
- https://lore.kernel.org/lkml/[email protected]/T
- https://security.netapp.com/advisory/ntap-20220715-0002
- https://github.com/advisories/GHSA-hmjf-2pvf-jr4v