Name | CVE-2022-1184 |
Description | A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service. |
Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
References | DLA-3173-1, DSA-5257-1 |
Vulnerable and fixed packages
The table below lists information on source packages.
Source Package | Release | Version | Status |
---|
linux (PTS) | bullseye (security), bullseye | 5.10.223-1 | fixed |
| bookworm | 6.1.106-3 | fixed |
| bookworm (security) | 6.1.112-1 | fixed |
| trixie | 6.10.11-1 | fixed |
| sid | 6.10.12-1 | fixed |
The information below is based on the following data on fixed versions.
Notes
https://bugzilla.redhat.com/show_bug.cgi?id=2070205
https://git.kernel.org/linus/65f8ea4cd57dbd46ea13b41dc8bac03176b04233