← CVE Radar
CVE-2022-0185Linux Kernel Heap-Based Buffer Overflow Vulnerability
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.
8.4 HIGHEPSS 25.15%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.4 | HIGH | 3.1NVD | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 7.2 | HIGH | 2.0NVD | AV:L/AC:L/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Sep 11, 2024
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Details
- CVE ID
- CVE-2022-0185
- Status
- Analyzed
- Assigner (CNA)
- redhat
- Published
- Feb 11, 2022
- Last modified
- 2026-06-17 04:20 UTC
Affected Products
As published by the CNA in the CVE record.
kernel1 version range
- 8.4
References
- git.kernel.org https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=722d94847de2
- github.com https://github.com/Crusaders-of-Rust/CVE-2022-0185
- security.netapp.com https://security.netapp.com/advisory/ntap-20220225-0003/
- openwall.com https://www.openwall.com/lists/oss-security/2022/01/18/7
- willsroot.io https://www.willsroot.io/2022/01/cve-2022-0185.html
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-0185