Back to feed
EUVD-2022-25155 · Published May 26, 2022
A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free_pipe_info() that is already called. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Technologies
Netapp H500E FirmwareNetapp H700ENetapp H410S FirmwareNetapp H410C FirmwareNetapp H300SNetapp H500SNetapp H700S FirmwareLinux Linux KernelNetapp H500ENetapp H300ENetapp H410SNetapp H700SNetapp H500S FirmwareNetapp H300E FirmwareNetapp H410CNetapp H700E FirmwareNetapp H300S Firmware
Weaknesses
CWE-416
CVSS scores
- v3.17.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - v2.07.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation
References
Potentially impacted assets
See if this affects your attack surface
