VDB
UBUNTU-CVE-2022-1011
UBUNTU-CVE-2022-1011
PUBLISHED
CVSS 7.300000190734863 HIGH
A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.
Risk Scores
CVSS 4.0
7.300000190734863
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:20.04:LTS | linux-gkeop | 5.4.0-1036.37, 5.4.0-1011.12, 5.4.0-1010.11 |
| Ubuntu:20.04:LTS | linux-raspi2 | 5.3.0-1007.8, 5.3.0-1014.16, 5.3.0-1015.17 |
| Ubuntu:20.04:LTS | linux-kvm | 5.4.0-1055.57, 5.4.0-1056.58, 5.4.0-1058.61 |
| Ubuntu:20.04:LTS | linux-azure-5.13 | 0, 5.13.0-1009.10~20.04.2, 5.13.0-1012.14~20.04.1 |
| Ubuntu:Pro:FIPS:16.04:LTS | linux-fips | 4.4.0-1002.2, 4.4.0-1001.1, 0 |
| Ubuntu:20.04:LTS | linux-oem-5.10 | 5.10.0-1045.47, 0, 5.10.0-1008.9 |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | linux-aws-fips | 4.15.0-2034.35, 4.15.0-2031.32, 4.15.0-2030.31 |
| Ubuntu:20.04:LTS | linux-raspi | 5.4.0-1007.7, 5.4.0-1026.29, 5.4.0-1025.28 |
| Ubuntu:20.04:LTS | linux-oracle-5.13 | 5.13.0-1016.20~20.04.1, 5.13.0-1018.22~20.04.1, 5.13.0-1021.26~20.04.1 |
| Ubuntu:20.04:LTS | linux-hwe-5.13 | 5.13.0-25.26~20.04.1, 5.13.0-41.46~20.04.1, 5.13.0-27.29~20.04.1 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | 0, 5.15.0-1073.75 |
| Ubuntu:18.04:LTS | linux-oem | 4.15.0-1081.91, 0, 4.15.0-1002.3 |
| Ubuntu:18.04:LTS | linux-aws-5.0 | 5.0.0-1027.30, 5.0.0-1024.27~18.04.1, 5.0.0-1025.28 |
| Ubuntu:22.04:LTS | linux-realtime | 0, 5.15.0-1032.35 |
| Ubuntu:20.04:LTS | linux-oracle-5.8 | 5.8.0-1034.35~20.04.2, 5.8.0-1037.38~20.04.1, 0 |
| Ubuntu:18.04:LTS | linux-azure-5.3 | 5.3.0-1007.8~18.04.1, 0, 5.3.0-1010.11~18.04.1 |
| Ubuntu:20.04:LTS | linux-azure-5.11 | 5.11.0-1028.31~20.04.2, 5.11.0-1025.27~20.04.1, 5.11.0-1027.30~20.04.1 |
| Ubuntu:Pro:FIPS:20.04:LTS | linux-azure-fips | 0, 5.4.0-1022.22+fips1 |
| Ubuntu:18.04:LTS | linux-aws-5.4 | 5.4.0-1057.60~18.04.1, 0, 5.4.0-1018.18~18.04.1 |
| Ubuntu:Pro:16.04:LTS | linux-oracle | 4.15.0-1059.65~16.04.1, 4.15.0-1031.34~16.04.1, 4.15.0-1030.33~16.04.1 |
…and 83 more
Timeline
- Mar 18, 2022 CVE Published
- Oct 28, 2026 CVE Updated
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Security Advisory
- Oct 30, 2026 Security Advisory
- Oct 30, 2026 Security Advisory
- Oct 30, 2026 Security Advisory
References
- https://ubuntu.com/security/CVE-2022-1011 report
- https://git.kernel.org/linus/0c4bcfdecb1ac0967619ee7ff44871d93c08c909 report
- https://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse.git/commit/?h=for-next report
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BG4J46EMFPDD5QHYXDUI3PJCZQ7HQAZR/ report
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C5AUUDGSDLGYU7SZSK4PFAN22NISQZBT/ report
- https://ubuntu.com/security/notices/USN-5381-1 advisory
- https://ubuntu.com/security/notices/USN-5467-1 advisory
- https://ubuntu.com/security/notices/USN-5515-1 advisory
- https://ubuntu.com/security/notices/USN-5541-1 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-1011 report