CVE-2022-2318: Use After Free
Last updated 25 April 2025
Other sources
There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-2318?
CVE-2022-2318 is considered a high severity vulnerability as it can cause crashes in the Linux kernel.
How do I fix CVE-2022-2318?
To fix CVE-2022-2318, upgrade your Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.11-1, or 6.12.12-1.
What software is affected by CVE-2022-2318?
CVE-2022-2318 affects Linux kernel versions up to 5.19 and certain Debian Linux versions.
What type of vulnerability is CVE-2022-2318?
CVE-2022-2318 is classified as a use-after-free vulnerability found in the timer handler of the Linux kernel.
Can CVE-2022-2318 be exploited without privileges?
Yes, CVE-2022-2318 can be exploited without any user privileges, allowing attackers to crash the Linux kernel.