PT-2022-6188 · Linux+8 · Linux Kernel+8

Alex000Young + 3 · Published 2022-09-19 · Updated 2025-06-03 · CVE-2022-3424

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free flaw was found in the Linux kernel’s SGI GRU driver, specifically in the way the gru file unlocked ioctl function is called by the user, where a fail pass occurs in the gru check chiplet assignment function. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2025:8333

ALT-PU-2023-1011

ALT-PU-2023-1015

ALT-PU-2023-1016

ALT-PU-2023-1044

ALT-PU-2023-1059

ALT-PU-2023-1066

ALT-PU-2023-1070

ALT-PU-2023-1128

ALT-PU-2023-1154

ALT-PU-2023-1155

ALT-PU-2023-1378

ALT-PU-2023-4894

ALT-PU-2023-7007

ALT-PU-2023-7682

ALT-PU-2024-4263

ALT-PU-2024-4843

BDU:2023-00361

CVE-2022-3424

DLA-3403-1

DLA-3404-1

INFSA-2025_8333

MGASA-2023-0007

MGASA-2023-0008

OESA-2023-1034

OESA-2023-1037

OESA-2023-1038

OESA-2023-1039

OPENSUSE-SU-2022_3897-1

OPENSUSE-SU-2022_3998-1

OPENSUSE-SU-2022_4053-1

OPENSUSE-SU-2022_4072-1

OPENSUSE-SU-2022_4574-1

OPENSUSE-SU-2022_4617-1

OPENSUSE-SU-2024:12407-1

OPENSUSE-SU-2024:13704-1

RHSA-2025:8333

RHSA-2025_8333

SUSE-SU-2022:3810-1

SUSE-SU-2022:3897-1

SUSE-SU-2022:3929-1

SUSE-SU-2022:3998-1

SUSE-SU-2022:4053-1

SUSE-SU-2022:4072-1

SUSE-SU-2022:4272-1

SUSE-SU-2022:4273-1

SUSE-SU-2022:4561-1

SUSE-SU-2022:4573-1

SUSE-SU-2022:4574-1

SUSE-SU-2022:4589-1

SUSE-SU-2022:4611-1

SUSE-SU-2022:4615-1

SUSE-SU-2022:4617-1

SUSE-SU-2023:0226-1

SUSE-SU-2023:0227-1

SUSE-SU-2023:0229-1

SUSE-SU-2023:0231-1

SUSE-SU-2023:0235-1

SUSE-SU-2023:0237-1

SUSE-SU-2023:0238-1

SUSE-SU-2023:0240-1

SUSE-SU-2023:0245-1

SUSE-SU-2023:0250-1

SUSE-SU-2023:0262-1

SUSE-SU-2023:0263-1

SUSE-SU-2023:0267-1

SUSE-SU-2023:0270-1

SUSE-SU-2023:0271-1

SUSE-SU-2023:0277-1

SUSE-SU-2023:0281-1

SUSE-SU-2023:0331-1

SUSE-SU-2023:0416-1

SUSE-SU-2023_0227-1

SUSE-SU-2023_0231-1

SUSE-SU-2023_0235-1

SUSE-SU-2023_0240-1

USN-5856-1

USN-5917-1

USN-5924-1

USN-5927-1

USN-5934-1

USN-5939-1

USN-5940-1

USN-5951-1

USN-5975-1

USN-5981-1

USN-5982-1

USN-5984-1

USN-5987-1

USN-5991-1

USN-6000-1

USN-6004-1

USN-6009-1

USN-6024-1

USN-6030-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Linuxmint

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 959

• https://github.com/torvalds/linux/commit/643a16a0eb1d6ac23744bb6e90a00fc21148a9dc · Patch
• https://ubuntu.com/security/notices/USN-6024-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-20938 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0231-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0250-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5984-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-39842 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-48424 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0263-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-0394 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0238-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5934-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0226-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0235-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0229-1 · Vendor Advisory