High · published March 18, 2022
A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 2.6.35, < 4.9.320 | 4.9.320 |
| linux/linux_kernel | ≥ 4.10, < 4.14.276 | 4.14.276 |
| linux/linux_kernel | ≥ 4.15, < 4.19.238 | 4.19.238 |
| linux/linux_kernel | ≥ 4.20, < 5.4.185 | 5.4.185 |
| linux/linux_kernel | ≥ 5.5, < 5.10.106 | 5.10.106 |
| linux/linux_kernel | ≥ 5.11, < 5.15.29 | 5.15.29 |
| linux/linux_kernel | ≥ 5.16, < 5.16.15 | 5.16.15 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| redhat/build_of_quarkus | all versions | — |
| redhat/developer_tools | all versions | — |
| redhat/enterprise_linux | all versions | — |
| redhat/enterprise_linux | all versions | — |
| redhat/enterprise_linux | all versions | — |
| redhat/enterprise_linux_eus | all versions | — |
| redhat/enterprise_linux_for_ibm_z_systems | all versions | — |
| redhat/enterprise_linux_for_ibm_z_systems_eus | all versions | — |
| redhat/enterprise_linux_for_power_little_endian | all versions | — |
| redhat/enterprise_linux_for_power_little_endian_eus | all versions | — |
| redhat/enterprise_linux_for_real_time | all versions | — |
| redhat/enterprise_linux_for_real_time_for_nfv | all versions | — |
| redhat/enterprise_linux_for_real_time_for_nfv_tus | all versions | — |
| redhat/enterprise_linux_for_real_time_tus | all versions | — |
| redhat/enterprise_linux_server_aus | all versions | — |
| redhat/enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions | all versions | — |
| redhat/enterprise_linux_server_tus | all versions | — |
| redhat/enterprise_linux_server_update_services_for_sap_solutions | all versions | — |
| redhat/virtualization_host | all versions | — |
| redhat/codeready_linux_builder | all versions | — |
| netapp/h300s_firmware | all versions | — |
| netapp/h500s_firmware | all versions | — |
| netapp/h700s_firmware | all versions | — |
| netapp/h300e_firmware | all versions | — |
| netapp/h500e_firmware | all versions | — |
| netapp/h700e_firmware | all versions | — |
| netapp/h410s_firmware | all versions | — |
| netapp/h410c_firmware | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| oracle/communications_cloud_native_core_binding_support_function | all versions | — |