CVE-2022-28796

Vendorfedoraproject, linux, netapp, redhatProductfedora, linux kernel, h300e firmware, h300s firmware, h410c firmware, h410s firmware, h500e firmware, h500s firmware, h700e firmware, h700s firmware, enterprise linux, active iq unified manager, solidfire & hci management node, hci compute node firmware, solidfire, enterprise sds & hci storage nodeDiscoveredApr 8, 2022UpdatedNov 21, 2024

jbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use-after-free caused by a transaction_t race condition.

View graph Watch Export

CVSS v3.1

7 HIGH

EPSS

0.33%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

CVSS v3.1 Detail

Attack VectorLOCAL

Attack ComplexityHIGH

Privileges RequiredLOW

User InteractionNONE

ScopeUNCHANGED

ConfidentialityHIGH

IntegrityHIGH

AvailabilityHIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Connections

16 relationships