NetSight
high7.1

CVE-2022-1973

A use-after-free flaw was found in the Linux kernel in log_replay in fs/ntfs3/fslog.c in the NTFS journal.

Impact

A use-after-free flaw was found in the Linux kernel in log_replay in fs/ntfs3/fslog.c in the NTFS journal. This flaw allows a local attacker to crash the system and leads to a kernel information leak problem.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.15 before 5.15.46
from 5.16 before 5.17.14
from 5.18 before 5.18.3
FedoraprojectFedora
Versions 35, 36
NetappH300s Firmware
All versions
NetappH500s Firmware
All versions
NetappH700s Firmware
All versions
NetappH410s Firmware
All versions
NetappH410c Firmware
All versions

Weakness classification

References