CVE-2022-24122: Use After Free
Published Jan 29, 2022
·Updated
kernel/ucount.c in the Linux kernel 5.14 through 5.16.4, when unprivileged user namespaces are enabled, allows a use-after-free and privilege escalation because a ucounts object can outlive its namespace.
Affected Software
37 affected componentsFixes available
Linux Linux kernel>=5.14<5.15.19
Linux Linux kernel>=5.16<5.16.5
NetApp Baseboard Management Controller H410c Firmware
NetApp Baseboard Management Controller H410c
NetApp Baseboard Management Controller H300s Firmware
NetApp Baseboard Management Controller H300s
NetApp Baseboard Management Controller H500s Firmware
NetApp Baseboard Management Controller H500s
NetApp Baseboard Management Controller H700s Firmware
NetApp Baseboard Management Controller H700s
NetApp Baseboard Management Controller H300e Firmware
NetApp Baseboard Management Controller H300e
NetApp Baseboard Management Controller H500e Firmware
NetApp Baseboard Management Controller H500e
NetApp Baseboard Management Controller H700e Firmware
NetApp Baseboard Management Controller H700e
NetApp Baseboard Management Controller H410s Firmware
NetApp Baseboard Management Controller H410s
Fedoraproject Fedora=34
Fedoraproject Fedora=35
All of the following
NetApp H410c Firmware
NetApp H410c
All of the following
NetApp H300s Firmware
NetApp H300s
All of the following
NetApp H500s Firmware
NetApp H500s
All of the following
NetApp H700s Firmware
NetApp H700s
All of the following
NetApp H300e Firmware
NetApp H300e
All of the following
NetApp H500e Firmware
NetApp H500e
All of the following
NetApp H700e Firmware
NetApp H700e
All of the following
NetApp H410s Firmware
NetApp H410s
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
Remediation
Mitigation
Disable unprivileged user namespaces:
sysctl -w kernel.unprivileged_userns_clone=0
Event History
Jan 29, 2022
CVE Published
via MITRE·09:33 PM
Data Sourced
via MITRE·09:33 PM
Description
Jan 12, 2024
Data Sourced
via Launchpad·12:07 AM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·01:48 AM
RemedyDescriptionSeverityAffected Software
Mar 27, 2025
Data Sourced
via Debian·04:21 AM
DescriptionAffected Software