CVE-2022-2318

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-2318
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-2318.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-2318
Downstream
AZL (1)
CLSA (2)
DEBIAN (1)
MGASA (2)
OESA (1)
SUSE (17)
UBUNTU (1)
Related
SUSE (17)
Published
2022-07-06T00:00:00Z
Modified
2026-10-22T15:53:11Z
Summary
[none]
Details

There are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of linux that allow attackers to crash linux kernel without any privileges.

Database specific 
{
    "cna_assigner": "redhat",
    "cwe_ids": [
        "CWE-416"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2318.json"
}
References

Affected packages

Git / github.com/torvalds/linux

Affected ranges

Type
GIT
Repo
https://github.com/torvalds/linux
Events
Introduced
88084a3df1672e131ddc1b4e39eeacfd39864acf
Fixed
9cc02ede696272c5271a401e4f27c262359bc2f6
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "Linux Kernel version prior to kernel 5.19 rc5"
                },
                {
                    "last_affected": "Linux Kernel version prior to kernel 5.19 rc5"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "fixed": "9cc02ede696272c5271a401e4f27c262359bc2f6"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

Linux Kernel version prior to kernel 5.*
Linux Kernel version prior to kernel 5.19 rc5

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-2318.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "27598290246638638555961300179788602673",
            "length": 224
        },
        "id": "CVE-2022-2318-0df98f03",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
        "target": {
            "file": "net/rose/rose_timer.c",
            "function": "rose_start_t1timer"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "75980529023026732869637169361132637941",
            "length": 224
        },
        "id": "CVE-2022-2318-3ac81a7a",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
        "target": {
            "file": "net/rose/rose_timer.c",
            "function": "rose_start_hbtimer"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "275540560450585683046905995694932070390",
                "135473126596461569252618462296016847256",
                "212536842774370707337086848276217251781",
                "205839966358968017636906205460986590681",
                "74934351456848810681331371500313221658",
                "247383895783757202834071138977218954257",
                "213270228821763152278804370513139753886",
                "208702628607141488990500305474681183132",
                "70000657537057486837050952579740970484",
                "323858043924487300068630802362162757292",
                "121084083426827528712201617271495623464",
                "121267357784011603622738709621247642931",
                "22998442309671910092070369587585248877",
                "248224872116660584336599912071030307854",
                "273124206045800218130311040215088247135",
                "55941588739914347165446152663357088878",
                "304505981341888722526880755054229822285",
                "323858043924487300068630802362162757292",
                "329380811290263491118759488610542607962",
                "116208205972955248655071018137819594017",
                "281784734223805852439704135835501385819",
                "180658026040654612932625722801619851768",
                "276543000777930521819347706328461998715",
                "306479188133962817625091539089655343810",
                "24377225857402545702736059132453720558",
                "323858043924487300068630802362162757292",
                "69292790614361159269885183542381989364",
                "191324336762234991139624814218417737832",
                "226373571066995480729262842812369134399",
                "52545566255796753949227017508418414366",
                "12066452272895158284364486529744837337",
                "153511691432184031949820572458935902989",
                "123313190413083512065991549281673136449",
                "323858043924487300068630802362162757292",
                "224526240011031069599450106744377103861",
                "71042715045815804461820751725408021680",
                "232030382883886886254457657620717977624",
                "20835102108258291915031040967271613290",
                "301226973563036914820644861671679782404",
                "308457047587739726305166458537338225326",
                "230087426905713527114855961567343826638",
                "168116138970525517015938167715691087474",
                "153620839324580631175985096789210842230",
                "283525179350781148746006719349144998624",
                "24670156083781303910254036149089122406",
                "33083520699154618175463120679306995078",
                "24713218620095640278143765174162188501",
                "30211443136020994067819842743820708741",
                "67039455693722239657132187295720196242",
                "212864651366002788945493248930298723670",
                "66805715922649323012934258962061866809",
                "196554596546286316318444251694332582318",
                "125631482422585073260832778858789248827",
                "280657021020242516901210552633500792645",
                "95793109219247612124514862148049729181",
                "203318652541095748726539140781168639253",
                "213060356669714373983361698801870481837",
                "220354220279849743271809164651583649939",
                "301958388777035292815327708547558146749",
                "98891569892360577048035482707912654090",
                "225809185245917566064839533994360299852",
                "204200211075770157089976018959151047520",
                "338264446975869755052151259570592345259",
                "339073317271585425318565497732527312080",
                "308627476588369004736258110076408909266",
                "23982873723025580634780890590851268879",
                "223330287703745538361970213341005051855",
                "68452085208293165046748057736206914311",
                "268238031416175232537286882730417037958",
                "168084882084670397626504724139867969987",
                "336575369690239178394944518702191696760",
                "114540805355221470964266898457291636119",
                "244750643351602373400711047234666849176",
                "253648286526363899304527754781850135781",
                "308871760045663692808247586585352124061"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2022-2318-450249fd",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
        "target": {
            "file": "net/rose/rose_timer.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "112668854486363097454436734446122030255",
            "length": 224
        },
        "id": "CVE-2022-2318-4518945f",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
        "target": {
            "file": "net/rose/rose_timer.c",
            "function": "rose_start_t2timer"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "305791432226076359199422281700095942703",
            "length": 81
        },
        "id": "CVE-2022-2318-8351f98a",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
        "target": {
            "file": "net/rose/rose_timer.c",
            "function": "rose_stop_timer"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "328619613035074989550659262484443789020",
            "length": 224
        },
        "id": "CVE-2022-2318-846452da",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
        "target": {
            "file": "net/rose/rose_timer.c",
            "function": "rose_start_t3timer"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "300647521280690657016442996206984893500",
            "length": 71
        },
        "id": "CVE-2022-2318-8639509e",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
        "target": {
            "file": "net/rose/rose_timer.c",
            "function": "rose_stop_heartbeat"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "159465932449748169162226812173327529205",
            "length": 210
        },
        "id": "CVE-2022-2318-8b4b723b",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
        "target": {
            "file": "net/rose/rose_timer.c",
            "function": "rose_start_heartbeat"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "324016549883391199915574543623002820942",
            "length": 479
        },
        "id": "CVE-2022-2318-8f5e6181",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
        "target": {
            "file": "net/rose/rose_timer.c",
            "function": "rose_idletimer_expiry"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "74103203597236085978944886925779594935",
            "length": 85
        },
        "id": "CVE-2022-2318-9f584ddf",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
        "target": {
            "file": "net/rose/rose_timer.c",
            "function": "rose_stop_idletimer"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "134991566696068536462496101974431130379",
            "length": 720
        },
        "id": "CVE-2022-2318-a1213753",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
        "target": {
            "file": "net/rose/rose_timer.c",
            "function": "rose_heartbeat_expiry"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "6297747281933655006747791052558236753",
            "length": 273
        },
        "id": "CVE-2022-2318-a8d6d249",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
        "target": {
            "file": "net/rose/rose_timer.c",
            "function": "rose_start_idletimer"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "312528909630763565687385287805794622447",
            "length": 569
        },
        "id": "CVE-2022-2318-e4035d60",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
        "target": {
            "file": "net/rose/rose_timer.c",
            "function": "rose_timer_expiry"
        }
    }
]
vanir_signatures_modified 
"2026-10-22T15:53:11Z"