CVE-2022-1011

Published: Mar 18, 2022Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.

Affected (36)

Products: Linux: Linux Kernel · Fedoraproject: Fedora · Redhat: Build Of Quarkus, Developer Tools, Enterprise Linux, Enterprise Linux For Ibm Z Systems, Enterprise Linux For Ibm Z Systems Eus, Enterprise Linux For Real Time, Enterprise Linux For Real Time For Nfv, Enterprise Linux For Real Time For Nfv Tus, Enterprise Linux For Real Time Tus, Enterprise Linux Server Aus, Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions, Enterprise Linux Server Tus, Enterprise Linux Server Update Services For Sap Solutions, Virtualization Host, Codeready Linux Builder · +3 more

Show all products

1 product

1 product

15 products

Enterprise Linux For Ibm Z Systems

Enterprise Linux For Ibm Z Systems Eus

Enterprise Linux For Real Time

Enterprise Linux For Real Time For Nfv

Enterprise Linux For Real Time For Nfv Tus

Enterprise Linux For Real Time Tus

Enterprise Linux Server Aus

Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions

Enterprise Linux Server Tus

Enterprise Linux Server Update Services For Sap Solutions

Virtualization Host

Codeready Linux Builder

8 products

1 product

1 product

Communications Cloud Native Core Binding Support Function

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 5.17
Linux Linux Kernel	Version 5.17
Linux Linux Kernel	Version 5.17 rc1
Linux Linux Kernel	Version 5.17 rc2
Linux Linux Kernel	Version 5.17 rc3
Linux Linux Kernel	Version 5.17 rc4
Linux Linux Kernel	Version 5.17 rc7

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 34
Fedoraproject Fedora	Version 35

Configuration C

14 vulnerable

Vulnerable Software	Affected Versions
Redhat Build Of Quarkus	Version 2.0
Redhat Developer Tools	Version 1.0
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux For Ibm Z Systems	Version 8.0
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 8.6
Redhat Enterprise Linux For Real Time	Version 8
Redhat Enterprise Linux For Real Time For Nfv	Version 8
Redhat Enterprise Linux For Real Time For Nfv Tus	Version 8.6
Redhat Enterprise Linux For Real Time Tus	Version 8.6
Redhat Enterprise Linux Server Aus	Version 8.6
Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions	Version 8.6
Redhat Enterprise Linux Server Tus	Version 8.6
Redhat Enterprise Linux Server Update Services For Sap Solutions	Version 8.6

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Virtualization Host	Version 4.0

Configuration E

1 vulnerable · 5 platform

Vulnerable Software	Affected Versions
Redhat Codeready Linux Builder	All versions

Running on/with	Platform Versions
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux	Version 8.6
Redhat Enterprise Linux Eus	Version 8.6
Redhat Enterprise Linux For Power Little Endian	Version 8.0
Redhat Enterprise Linux For Power Little Endian Eus	Version 8.6

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H300s Firmware	All versions

Running on/with	Platform Versions
Netapp H300s	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H500s Firmware	All versions

Running on/with	Platform Versions
Netapp H500s	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H700s Firmware	All versions

Running on/with	Platform Versions
Netapp H700s	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H300e Firmware	All versions

Running on/with	Platform Versions
Netapp H300e	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H500e Firmware	All versions

Running on/with	Platform Versions
Netapp H500e	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H700e Firmware	All versions

Running on/with	Platform Versions
Netapp H700e	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410s Firmware	All versions

Running on/with	Platform Versions
Netapp H410s	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410c Firmware	All versions

Running on/with	Platform Versions
Netapp H410c	All versions

Configuration N

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 9.0

Configuration O

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Communications Cloud Native Core Binding Support Function	Version 22.1.3

Related CWEs

CWE-416

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (10)

https://bugzilla.redhat.com/show_bug.cgi?id=2064855

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse.git/commit/?h=for-next

Source: secalert@redhat.com

Vendor Advisory

https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://www.debian.org/security/2022/dsa-5173

Source: secalert@redhat.com

Third Party Advisory

https://www.oracle.com/security-alerts/cpujul2022.html

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2064855