Security Advisory

CVE-2022-2978

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-08-24 00:00:00
Last updated 2024-08-03 00:53:00
Assigner redhat
State PUBLISHED

Description

A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function nilfs_mdt_destroy. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.