What’s Vulnerable › Vulnerabilities

CVE-2022-1998

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-06-09 · updated 2026-06-17
• Weakness: CWE-416

Description

A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_records_to_user() call to fail in copy_event_to_user(). A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

Affected products

• Fedoraproject Fedora: 35
• Linux kernel: from 5.10.46 before 5.10.97; from 5.12.12 before 5.15.20; from 5.16.0 before 5.16.6 — fixed in 5.10.97, 5.15.20, 5.16.6
• NetApp H300S Firmware: all versions
• NetApp H410C Firmware: all versions
• NetApp H410S Firmware: all versions
• NetApp H500S Firmware: all versions
• NetApp H700S Firmware: all versions
• Red Hat Enterprise Linux: 9.0

How to fix

Upgrade to a fixed version: Linux kernel 5.10.97, 5.15.20, 5.16.6. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/notify/fanotify/fanotify_user.c?h=v5.17&id=ee12595147ac1fbfb5bcb23837e26dd58d94b15d
• https://seclists.org/oss-sec/2022/q1/99
• https://security.netapp.com/advisory/ntap-20220707-0009/
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/notify/fanotify/fanotify_user.c?h=v5.17&id=ee12595147ac1fbfb5bcb23837e26dd58d94b15d
• https://seclists.org/oss-sec/2022/q1/99
• https://security.netapp.com/advisory/ntap-20220707-0009/

Get alerted when CVE-2022-1998 or the next vulnerability affects your stack