CVE-2022-1943

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-06-02 · updated 2026-06-17
Weakness: CWE-787

Description

A flaw out of bounds memory write in the Linux kernel UDF file system functionality was found in the way user triggers some file operation which triggers udf_write_fi(). A local user could use this flaw to crash the system or potentially

Affected products

Linux kernel: from 5.15 before 5.15.40; from 5.16 before 5.17.8 — fixed in 5.15.40, 5.17.8

How to fix

Upgrade to a fixed version: Linux kernel 5.15.40, 5.17.8. Check the vendor advisory for mitigations.

References

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c1ad35dd0548ce947d97aaf92f7f2f9a202951cf
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c1ad35dd0548ce947d97aaf92f7f2f9a202951cf

Get alerted when CVE-2022-1943 or the next vulnerability affects your stack