PT-2022-7360 · Linux+1 · Linux Kernel+1

Alex · Published 2022-11-13 · Updated 2026-05-26 · CVE-2022-3238

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double-free flaw was found in the Linux kernel’s NTFS3 subsystem. This issue occurs when a user triggers remount and umount simultaneously, allowing a local user to crash or potentially escalate their privileges on the system. The flaw is related to a race condition due to concurrent access to a resource, which can lead to a double-free error. This can impact the confidentiality, integrity, and availability of protected information or allow an attacker to elevate their privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Double Free

Weakness Enumeration

CWE-415

CWE-459

Related Identifiers

BDU:2024-04161

CVE-2022-3238

ECHO-83D1-B48E-F75F

OESA-2025-1570

OESA-2025-1571

Affected Products

Debian

Linux Kernel

References · 34

• https://nvd.nist.gov/vuln/detail/CVE-2025-37925 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-37940 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49784 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-3238 · Security Note
• https://osv.dev/vulnerability/OESA-2025-1571 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2022-3238 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3238 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2022-3238 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1570 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-3238 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-37782 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53061 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53146 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53073 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-3238 · Security Note