Vulnerabilities > CVE-2022-2318 - Use After Free vulnerability in multiple products

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
linux
debian
netapp
CWE-416

Summary

There are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of linux that allow attackers to crash linux kernel without any privileges.

Vulnerable Configurations

Part Description Count
OS
Linux
4610
OS
Debian
2
OS
Netapp
5
Hardware
Netapp
5

Common Weakness Enumeration (CWE)