A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function ni…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Aug 24, 2022 · NIST NVD

   Detected

   A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function nilfs_mdt_destroy. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

2. Oct 14, 2026 · NIST NVD

   Updated

   A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function nilfs_mdt_destroy. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

Affected

• cpe debian/debian linux10.0
• cpe linux/linux kernelversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2022-2978

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2022-2978

  30-day exploitation probability 0.3%

  first.org
• NIST NVDVulnerability recordCVE-2022-2978

  A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function nilfs_mdt_destroy. A local user could use this flaw to crash the system or potentially escalate their privileges on

  nvd.nist.gov

References

• Reference · cert-portal.siemens.com
• Mailing List · lists.debian.org
• Reference · lore.kernel.org