PT-2022-4782 · Linux+9 · Linux Kernel+9

Published 2022-03-07 · Updated 2025-09-29 · CVE-2022-1011

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel's FUSE filesystem (affected versions not specified)

Description A use-after-free flaw was found in the Linux kernel's FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation. The issue is related to the use of memory after it has been freed, which can be exploited to access confidential data, compromise data integrity, and cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2022:1988

ALSA-2022_1988

ALSA-2024_2394

ALSA-2025_16880

ALT-PU-2022-1647

ALT-PU-2022-1668

ALT-PU-2022-1730

ALT-PU-2022-1768

ALT-PU-2022-2155

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-9087

BDU:2022-05723

CESA-2022_1975

CESA-2022_1988

CVE-2022-1011

DLA-3065-1

DSA-5173-1

ELSA-2022-1988

ELSA-2022-9761

ELSA-2024-12684

ELSA-2024-5259

MGASA-2022-0121

MGASA-2022-0122

OESA-2022-1593

OPENSUSE-SU-2022_1163-1

OPENSUSE-SU-2022_1183-1

OPENSUSE-SU-2022_2111-1

RHSA-2022:1975

RHSA-2022:1988

RHSA-2022_1975

RHSA-2022_1988

RHSA-2024:5259

RLSA-2022:1975

RLSA-2022:1988

RLSA-2022_1975

RLSA-2022_1988

SUSE-SU-2022:1163-1

SUSE-SU-2022:1183-1

SUSE-SU-2022:1318-1

SUSE-SU-2022:1320-1

SUSE-SU-2022:1322-1

SUSE-SU-2022:1326-1

SUSE-SU-2022:1329-1

SUSE-SU-2022:1335-1

SUSE-SU-2022:1369-1

SUSE-SU-2022:1407-1

SUSE-SU-2022:1440-1

SUSE-SU-2022:1453-1

SUSE-SU-2022:1486-1

SUSE-SU-2022:1593-1

SUSE-SU-2022:1598-1

SUSE-SU-2022:1611-1

SUSE-SU-2022:1634-1

SUSE-SU-2022:1641-1

SUSE-SU-2022:1651-1

SUSE-SU-2022:1668-1

SUSE-SU-2022:1686-1

SUSE-SU-2022:2077-1

SUSE-SU-2022:2082-1

SUSE-SU-2022:2083-1

SUSE-SU-2022:2103-1

SUSE-SU-2022:2104-1

SUSE-SU-2022:2111-1

SUSE-SU-2022_1593-1

SUSE-SU-2022_1598-1

SUSE-SU-2022_1634-1

SUSE-SU-2022_1641-1

SUSE-SU-2022_1651-1

SUSE-SU-2022_1686-1

SUSE-SU-2022_2083-1

SUSE-SU-2023:0416-1

USN-5381-1

USN-5467-1

USN-5515-1

USN-5541-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 564

• 🔥 https://github.com/xkaneiki/CVE-2022-1011 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2022-1011 · Vendor Advisory
• https://debian.org/security/2022/dsa-5173 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:1988 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5541-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-4197 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1205 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1634-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1318-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-23037 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5515-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:1975 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1163-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2022-0121.html · Security Note
• https://osv.dev/vulnerability/USN-5541-1 · Vendor Advisory