CVE-2022-3202

Published: Sep 14, 2022Modified: Jun 17, 2026

7.1

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Exploitability: 1.8 / Impact: 5.2

Source: NVD

Description

A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the Linux kernel. This could allow a local attacker to crash the system or leak kernel internal information.

Affected (13)

Products: Linux: Linux Kernel · Netapp: H410c Firmware, H300s Firmware, H500s Firmware, H700s Firmware, H410s Firmware

1 product

5 products

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	version < 4.9.311
Linux Linux Kernel	4.10 ≤ version < 4.14.276
Linux Linux Kernel	4.15 ≤ version < 4.19.238
Linux Linux Kernel	4.20 ≤ version < 5.4.189
Linux Linux Kernel	5.11 ≤ version < 5.15.34
Linux Linux Kernel	5.16 ≤ version < 5.16.20
Linux Linux Kernel	5.17 ≤ version < 5.17.3
Linux Linux Kernel	5.5.0 ≤ version < 5.10.111

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410c Firmware	All versions

Running on/with	Platform Versions
Netapp H410c	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H300s Firmware	All versions

Running on/with	Platform Versions
Netapp H300s	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H500s Firmware	All versions

Running on/with	Platform Versions
Netapp H500s	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H700s Firmware	All versions

Running on/with	Platform Versions
Netapp H700s	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410s Firmware	All versions

Running on/with	Platform Versions
Netapp H410s	All versions

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (4)

https://github.com/torvalds/linux/commit/a53046291020ec41e09181396c1e829287b48d47

Source: secalert@redhat.com

Patch

https://security.netapp.com/advisory/ntap-20221228-0007/

Source: secalert@redhat.com

Third Party Advisory

https://github.com/torvalds/linux/commit/a53046291020ec41e09181396c1e829287b48d47

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://security.netapp.com/advisory/ntap-20221228-0007/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.