A use-after-free flaw was found in the Linux kernel’s PLP... · CVE-2022-2961 · GitHub Advisory Database · GitHub

A use-after-free flaw was found in the Linux kernel’s PLP...

High severity Unreviewed Published Aug 29, 2022 to the GitHub Advisory Database • Updated Jul 7, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race condition by calling bind while simultaneously triggering the rose_bind() function. This flaw allows a local user to crash or potentially escalate their privileges on the system.

References

Published by the National Vulnerability Database

Aug 29, 2022

Published to the GitHub Advisory Database Aug 29, 2022

Last updated Jul 7, 2023

Severity

High

7.0

/ 10

CVSS base metrics

Attack vector

Local

Attack complexity

High

Privileges required

Low

User interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H