CVE-2022-3202 | ByteOS Network

Vulnerability Details :

CVE-2022-3202

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-14 Sep, 2022 | 00:00

Updated At-03 Aug, 2024 | 01:00

A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the Linux kernel. This could allow a local attacker to crash the system or leak kernel internal information.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:redhat

Assigner Org ID:53f830b8-0a3f-465b-8143-3b8a9948e749

Published At:14 Sep, 2022 | 00:00

Updated At:03 Aug, 2024 | 01:00

▼CVE Numbering Authority (CNA)

A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the Linux kernel. This could allow a local attacker to crash the system or leak kernel internal information.

Affected Products

Vendor

Product

Versions

Affected

Linux Kernel version prior to kernel 5.18 rc1

Problem Types

Type	CWE ID	Description
CWE	CWE-476	CWE-476

Type: CWE

CWE ID: CWE-476

Description: CWE-476

References

Hyperlink	Resource
https://github.com/torvalds/linux/commit/a53046291020ec41e09181396c1e829287b48d47	N/A
https://security.netapp.com/advisory/ntap-20221228-0007/	N/A

Hyperlink: https://github.com/torvalds/linux/commit/a53046291020ec41e09181396c1e829287b48d47

Resource: N/A

Hyperlink: https://security.netapp.com/advisory/ntap-20221228-0007/

Resource: N/A

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://github.com/torvalds/linux/commit/a53046291020ec41e09181396c1e829287b48d47	x_transferred
https://security.netapp.com/advisory/ntap-20221228-0007/	x_transferred

Hyperlink: https://github.com/torvalds/linux/commit/a53046291020ec41e09181396c1e829287b48d47

Resource:

x_transferred

Hyperlink: https://security.netapp.com/advisory/ntap-20221228-0007/

Resource:

x_transferred

▼National Vulnerability Database (NVD)

Source:secalert@redhat.com

Published At:14 Sep, 2022 | 15:15

Updated At:05 Oct, 2023 | 14:09

A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the Linux kernel. This could allow a local attacker to crash the system or leak kernel internal information.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.1	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Type: Primary

Version: 3.1

Base score: 7.1

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CPE Matches

Linux Kernel Organization, Inc

>>linux_kernel>>Versions before 4.9.311(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 4.10(inclusive) to 4.14.276(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 4.15(inclusive) to 4.19.238(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 4.20(inclusive) to 5.4.189(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 5.5.0(inclusive) to 5.10.111(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 5.11(inclusive) to 5.15.34(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 5.16(inclusive) to 5.16.20(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 5.17(inclusive) to 5.17.3(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

>>h410c_firmware>>-

cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*

>>h410c>>-

cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*

>>h300s_firmware>>-

cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*

>>h300s>>-

cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

>>h500s_firmware>>-

cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*

>>h500s>>-

cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

>>h700s_firmware>>-

cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*

>>h700s>>-

cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

>>h410s_firmware>>-

cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*

>>h410s>>-

cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-476	Primary	secalert@redhat.com
CWE-476	Secondary	nvd@nist.gov

CWE ID: CWE-476

Type: Primary

Source: secalert@redhat.com

CWE ID: CWE-476

Type: Secondary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://github.com/torvalds/linux/commit/a53046291020ec41e09181396c1e829287b48d47	secalert@redhat.com	Patch
https://security.netapp.com/advisory/ntap-20221228-0007/	secalert@redhat.com	Third Party Advisory

Hyperlink: https://github.com/torvalds/linux/commit/a53046291020ec41e09181396c1e829287b48d47

Source: secalert@redhat.com

Resource:

Patch

Hyperlink: https://security.netapp.com/advisory/ntap-20221228-0007/

Source: secalert@redhat.com

Resource:

Third Party Advisory