What is CVE-2022-2938?

CVE-2022-2938 is a high-severity vulnerability in Linux Kernel, classified under Use After Free. CVSS score: 7.8/10. Published 2022-08-23.

How severe is CVE-2022-2938?

High severity. CVSS v3 base score is 7.8 out of 10.

Use After Free in Linux Kernel

CVE-2022-2938

A flaw was found in the Linux kernel's implementation of Pressure Stall Information. While the feature is disabled by default, it could allow an attacker to crash the system or have other memory-corruption side effects.

Vulnerability class: Use-After-Free

EPSS: 0.003 (18.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Linux Linux_kernel
Netapp H300s
Netapp H300s_firmware
Netapp H410c
Netapp H410c_firmware
Netapp H410s
Netapp H410s_firmware
Netapp H500s
Netapp H500s_firmware
Netapp H700s

Weakness classification (CWE)

CWE-416 — Use After Free

References

secalert@redhat.com (Patch, Mailing List, Vendor Advisory)
secalert@redhat.com (Third Party Advisory)

Frequently asked questions

What is CVE-2022-2938?: CVE-2022-2938 is a high-severity vulnerability in Linux Kernel, classified under Use After Free. CVSS score: 7.8/10. Published 2022-08-23.
How severe is CVE-2022-2938?: High severity. CVSS v3 base score is 7.8 out of 10.