NVD Vulnerability Detail

CVE-2022-1184

Summary	A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service.
Publication Date	Aug. 30, 2022, 12:15 a.m.
Registration Date	Aug. 30, 2022, 10 a.m.
Last Update	Nov. 21, 2024, 3:40 p.m.

Affected software configurations

Configuration2	or higher	or less	more than	less than
cpe:2.3:o:redhat:enterprise_linux:8.0:::::::*
cpe:2.3:o:redhat:enterprise_linux:9.0:::::::*

Configuration4	or higher	or less	more than	less than
cpe:2.3:o:canonical:ubuntu_linux:14.04::::esm:::
cpe:2.3:o:canonical:ubuntu_linux:20.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:16.04::::esm:::
cpe:2.3:o:canonical:ubuntu_linux:18.04::::esm:::

Related information, measures and tools

No	URL	タグ
1	https://access.redhat.com/security/cve/CVE-2022-1184	Third Party Advisory
2	https://access.redhat.com/security/cve/CVE-2022-1184	Third Party Advisory
3	https://bugzilla.redhat.com/show_bug.cgi?id=2070205	Issue Tracking Third Party Advisory
4	https://bugzilla.redhat.com/show_bug.cgi?id=2070205	Issue Tracking Third Party Advisory
5	https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html	Mailing List Third Party Advisory
6	https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html	Mailing List Third Party Advisory
7	https://ubuntu.com/security/CVE-2022-1184	Patch Third Party Advisory
8	https://ubuntu.com/security/CVE-2022-1184	Patch Third Party Advisory
9	https://www.debian.org/security/2022/dsa-5257	Third Party Advisory
10	https://www.debian.org/security/2022/dsa-5257	Third Party Advisory

Common Vulnerabilities List

JVN Vulnerability Information

Linux の Linux Kernel 他複数ベンダの製品における解放済みメモリの使用に関する脆弱性

Title	Linux の Linux Kernel 他複数ベンダの製品における解放済みメモリの使用に関する脆弱性
Summary	Linux の Linux Kernel 他複数ベンダの製品には、解放済みメモリの使用に関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	April 18, 2022, midnight
Registration Date	Oct. 13, 2023, 12:17 p.m.
Last Update	Oct. 13, 2023, 12:17 p.m.

Affected System

レッドハット

Red Hat Enterprise Linux 8.0

Red Hat Enterprise Linux 9.0

Debian

Debian GNU/Linux 10.0

Debian GNU/Linux 11.0

Linux

Linux Kernel

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2022-1184	https://www.cve.org/CVERecord?id=CVE-2022-1184
National Vulnerability Database (NVD)
2	CVE-2022-1184	https://nvd.nist.gov/vuln/detail/CVE-2022-1184
Red Hat Customer Portal
3	CVE-2022-1184	https://access.redhat.com/security/cve/CVE-2022-1184

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-416	https://cwe.mitre.org/data/definitions/416.html

ベンダー情報

No	Name	URL
Debian
1	[SECURITY] [DLA 3173-1] linux-5.10 security update	https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
Debian Security Advisory
2	DSA-5257-1	https://www.debian.org/security/2022/dsa-5257
Linux Kernel
3	Linux Kernel Archives	https://www.kernel.org
Red Hat Bugzilla
4	Bug 2070205	https://bugzilla.redhat.com/show_bug.cgi?id=2070205

その他

No	Name	URL
ICS-CERT ADVISORY
1	ICSA-23-166-11	https://www.cisa.gov/news-events/ics-advisories/icsa-23-166-11
JVN
2	JVNVU#99464755	https://jvn.jp/vu/JVNVU99464755/index.html
関連文書
3	ubuntu.com (CVE-2022-1184)	https://ubuntu.com/security/CVE-2022-1184

Change Log

No	Changed Details	Date of change
1	[2023年10月12日] 掲載	Oct. 12, 2023, 2:25 p.m.