CVE-2022-3202

Published: Sep 14, 2022Modified: Nov 21, 2024

7.1

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Exploitability: 1.8 / Impact: 5.2

Source: NVD

Description

A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the Linux kernel. This could allow a local attacker to crash the system or leak kernel internal information.

Affected (13)

Products: Linux: Linux Kernel · Netapp: H410c Firmware, H300s Firmware, H500s Firmware, H700s Firmware, H410s Firmware

1 product

5 products

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 4.9.311
Linux Linux Kernel	From 4.10 to 4.14.276
Linux Linux Kernel	From 4.15 to 4.19.238
Linux Linux Kernel	From 4.20 to 5.4.189
Linux Linux Kernel	From 5.11 to 5.15.34
Linux Linux Kernel	From 5.16 to 5.16.20
Linux Linux Kernel	From 5.17 to 5.17.3
Linux Linux Kernel	From 5.5.0 to 5.10.111

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410c Firmware	All versions

Running on/with	Platform Versions
Netapp H410c	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H300s Firmware	All versions

Running on/with	Platform Versions
Netapp H300s	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H500s Firmware	All versions

Running on/with	Platform Versions
Netapp H500s	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H700s Firmware	All versions

Running on/with	Platform Versions
Netapp H700s	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410s Firmware	All versions

Running on/with	Platform Versions
Netapp H410s	All versions

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (4)

https://github.com/torvalds/linux/commit/a53046291020ec41e09181396c1e829287b48d47

Source: secalert@redhat.com

Patch

https://security.netapp.com/advisory/ntap-20221228-0007/

Source: secalert@redhat.com

Third Party Advisory

https://github.com/torvalds/linux/commit/a53046291020ec41e09181396c1e829287b48d47

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://security.netapp.com/advisory/ntap-20221228-0007/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.