CVE-2022-1882

Source
https://cve.org/CVERecord?id=CVE-2022-1882
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-1882.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-1882
Downstream
Related
Published
2022-05-26T17:15:08.830Z
Modified
2026-03-13T05:22:12.559678Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe postonenotification() after freepipeinfo() that is already called. This flaw allows a local user to crash or potentially escalate their privileges on the system.

References

Affected packages

Git /

Affected ranges

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-1882.json"
unresolved_ranges
[
    {
        "events": [
            {
                "introduced": "5.10.106"
            },
            {
                "fixed": "5.10.134"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "5.15.29"
            },
            {
                "fixed": "5.15.58"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "5.16.15"
            },
            {
                "fixed": "5.18.15"
            }
        ]
    }
]