← Database

CVE-2022-2961

HIGH CVSS: 7.0 Published: 2022-08-29 Modified: 2026-06-17

Description

A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race condition by calling bind while simultaneously triggering the rose_bind() function. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Affected Platforms

Netapp H410SNetapp H410CFedoraproject FedoraNetapp H300S FirmwareNetapp H300SNetapp H500SNetapp H410S FirmwareNetapp H700S FirmwareNetapp H410C FirmwareNetapp H500S Firmware

Weakness Type

CWE-416, CWE-362

References