CVE-2022-2318: Use After Free
Published Jul 6, 2022
·Updated
Last updated 25 April 2025
Other sources
There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges.
— Launchpad
Affected Software
28 affected componentsFixes available
Linux Linux kernel<5.19
Linux Linux kernel=5.19-rc1
Linux Linux kernel=5.19-rc2
Linux Linux kernel=5.19-rc3
Linux Linux kernel=5.19-rc4
Debian Debian Linux=10.0
Debian Debian Linux=11.0
All of the following
NetApp H300s Firmware
NetApp H300s
All of the following
NetApp H500s Firmware
NetApp H500s
All of the following
NetApp H700s Firmware
NetApp H700s
All of the following
NetApp H410s Firmware
NetApp H410s
All of the following
NetApp H410c Firmware
NetApp H410c
NetApp H300s Firmware
NetApp H300s
NetApp H500s Firmware
NetApp H500s
NetApp H700s Firmware
NetApp H700s
NetApp H410s Firmware
NetApp H410s
NetApp H410c Firmware
NetApp H410c
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
Remediation
Event History
Jul 6, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Jan 12, 2024
Data Sourced
via Launchpad·12:07 AM
Description
May 6, 2025
Data Sourced
via Ubuntu·04:39 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-2318?
CVE-2022-2318 is considered a high severity vulnerability as it can cause crashes in the Linux kernel.
2
How do I fix CVE-2022-2318?
To fix CVE-2022-2318, upgrade your Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.11-1, or 6.12.12-1.
3
What software is affected by CVE-2022-2318?
CVE-2022-2318 affects Linux kernel versions up to 5.19 and certain Debian Linux versions.
4
What type of vulnerability is CVE-2022-2318?
CVE-2022-2318 is classified as a use-after-free vulnerability found in the timer handler of the Linux kernel.
5
Can CVE-2022-2318 be exploited without privileges?
Yes, CVE-2022-2318 can be exploited without any user privileges, allowing attackers to crash the Linux kernel.