A use-after-free flaw was found in the Linux kernel in log_replay in fs/ntfs3/fslog.c in the NTFS journal. This flaw allows a local attacker to crash the system and leads to a kernel information leak problem.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.50-23.125Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools | Sep 30, 2022 | Aug 5, 2022 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade perfUpgrade kernelUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-libbpf-devel | Feb 17, 2025 | Jun 8, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 5, 2022 |
| Ubuntu | — | Upgrade linux-image-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-48-generic-64kUpgrade linux-image-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1017-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1015-intel-iotgUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1015-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-48-lowlatencyUpgrade linux-image-5.15.0-1019-awsUpgrade linux-image-oem-22.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-47-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1014-raspi-nolpaeUpgrade linux-image-5.15.0-1002-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-48-generic-lpaeUpgrade linux-image-5.15.0-48-genericUpgrade linux-image-virtualUpgrade linux-image-5.15.0-47-generic-64kUpgrade linux-image-azureUpgrade linux-image-5.15.0-1014-raspiUpgrade linux-image-gcpUpgrade linux-image-5.15.0-48-lowlatency-64kUpgrade linux-image-5.15.0-1017-gcpUpgrade linux-image-5.15.0-1019-azureUpgrade linux-image-5.15.0-1017-kvmUpgrade linux-image-kvmUpgrade linux-image-5.15.0-47-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.17.0-1013-oemUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1013-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-47-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-47-generic | Jul 21, 2022 | Jul 21, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub